Installation

Monitoring of activity - Is Synology NAS DSM 6.2 compatible with Splunk?

Dawn
New Member

We have a Synology NAS running on DSM 6.2.4-25556 Update 6

It has the feature to send logs to an IP address. I was wondering if it would be possible to use Splunk to monitor our NAS for suspicious activities such as a user downloading large amounts of files, logging in from a different location and so forth.

 

Below you can see the Log Sending available on the Synology DSM 6.2

Dawn_0-1682414833100.png

 

Would this be compatible with Splunk? Would we need to host the Splunk server ourselves or does this work with a cloud solution? 

 

Labels (1)
0 Karma

manuelostertag
Path Finder

Hi @Dawn ,

I think the usage of syslog and the Splunk UF could do the job.

NAS sends data to syslog
Splunk UF "collects" data from syslog and forward it to Splunk

NAS -> syslog-ng <- Splunk UF -> Splunk (Enterprise|Cloud)

  1. Install and setup syslog (for e.g syslog-ng) on a server
  2. Install and setup Splunk UF on a server (this could be the same server as in step 1); the UF should monitor the file(s) which will created by the syslog-ng and forward them to you Splunk instance (Enterprise or Cloud)
  3. Configure your NAS to send the data to the syslog-ng server

 

Here some useful links:
https://community.splunk.com/t5/Getting-Data-In/Best-practices-Syslog-ng-to-splunk/m-p/470405

https://www.splunk.com/en_us/blog/tips-and-tricks/using-syslog-ng-with-splunk.html

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...