topic Re: How Can I pull syslog data from vSmartzone and APs? in Cloudpath Enrollment System (ES)

How Can I pull syslog data from vSmartzone and APs?

jtchi — Thu, 19 Dec 2019 23:21:50 GMT

I'm looking to pull syslog data from my vSZ, APs and Cloudpath instance into a Splunk Cloud instance via http/https. Currently my vSZ and Cloudpath are hosted, one in AWS and the other by Ruckus, I have seen the Syslog options in both the vSZ and at the AP level to send data to a syslog server, which is not easily done with Splunk Cloud without hosting a Universal Forwarder out in the Cloud also.

Any Ideas?

Re: How Can I pull syslog data from vSmartzone and APs?

diego_garcia_de — Fri, 20 Dec 2019 00:08:41 GMT

looking at splunk cloud indeed it doesnt seem as you have many options. Are you doing any syslog collecting at all with Splunk? Unfortunately you can't install the splunk agent in the vSZ VM so indeed you will need a universal collector.

(unless maybe you can install the collector on a VM hosting some other application to which you get root level access).