How to configure Syslog on Wireless Router

[thiliphk]

Team,

Please guide me to configure my wireless router to send the data over to Splunk ( My laptop)

1. How to validate whether Router sends syslog data to my Splunk installed in Laptop ?
2. How do I configure my Laptop to receive / monitor syslog from wirlress router ?

[jcoates_splunk]

i'd start with asking whether the router can emit syslog at all... you might need an alternate OS such as dd-wrt or openwrt.

[jianwei]

how to read to log from dd-wrt to splunk?

[piebob]

here are the instructions for adding a network input to Splunk:
http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports
you will need to ensure that your wireless access point actually does write syslog.

once you have confirmed this, and added the network input, you will be able to search for data from the device in your Splunk instance.

you might want to check out the Splunk tutorial if you are new to Splunk.

[Ayn]

How to configure a router to send syslog varies wildly from router to router (if the option to syslog exists at all - it often doesn't on cheaper models).

You can check that you're getting syslog by running some kind of network sniffer like tcpdump or Wireshark on your laptop.

As for the last question, this is a good point to start: http://docs.splunk.com/Documentation/Splunk/latest/Data/WhatSplunkcanmonitor