- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
XenServer 5.6
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is app splunk for xenserver . How to setup for xenserver pool
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

I have never got that to work.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Do you mean XenApp and not XenServer? If you installed XenApp on a Unix/Linux system, according to the following article you need to add the user.info and user.notice to the syslog.conf file and then use the ctxcfg to configure the level of logging for the user connect/disconnect/reconnect/logoffs.
http://support.citrix.com/proddocs/topic/ps-unix/ps-unix-deploy-event-logging.html
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you want to collect the logs from within XenServer:
Open XenCenter and right click on the XenServer you want to configure to send syslog to Splunk and select Properties.
Click on the Log Destination tab
Select the Remote selection
Enter the IP address of the Splunk server
Select OK
Repeat the above steps for all remaining XenServers
If you want the server messages, you will need to edit the syslog.conf file.
vi /etc/syslog.conf
Add the details you want to send to Splunk. Below is an example.
.crit;.emerg;.info;mail.;authpriv.;cron.;local6.* @splunk.localdomain
W*ithin Splunk, you need to make sure to listen on UDP port 514 to capture Syslog traffic.*
Open up Splunk and go to Manager
Under Data, select Data inputs
Under UDP, select Add new
List item
In UDP Port, type in 514. Under Source type, set the sourcetype to From list and then in the list choose syslog.
List item
Click Save
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to get this data for the app for xenserver?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I need to configure logs for below files to splunk.
SMlog
audit:
messages: Xensource.log:
how to set
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
do mean install splunk on a xenserver or collecting xenserver data?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
collecting xenserver data on to the splunk.
