Logging Infrastructure

Prev Next
Data flow from the syslog utitilty to the live log viewer and remote syslog

Figure: Data flow from the syslog utitilty to the live log viewer and remote syslog

Each component of the OneSpan Authentication Server Appliance Configuration Tool sends information to syslog, i.e. a standard log message system on a Linux server that can forward log messages in an IP network. The syslog utility handles the information, which can be stored locally or remotely. Both is possible at the same time. Local logging is always active and cannot be disabled. Syslog data is made available in the live log viewer. Remote syslog can be activated and requires configuration.

The syslog audit levels can be configured with the OneSpan Authentication Server Appliance Configuration Tool (see  Log levels).

Remote syslog

Remote syslog must be activated in the OneSpan Authentication Server Appliance Configuration Tool and requires the configuration of the following:

  • The IP address of the remote syslog server to send data to.
  • The syslog level of information to send.

A syslog-compliant application can use the data for log viewing.

Log levels

The log system can be configured to generate log information at different levels (see Table: Log levels).

Table:  Log levels
TypeDescription
CriticalA system-critical warning that services may not be running.
ErrorAn error occurred that requires action, although services may still be running.
WarningNot an error, but an error may occur if no action is taken.
NoticeEvents that are unusual, but not errors. No immediate action required.
InformationalNormal operational messages, may be collected for reporting or other purposes. No action required.
DebugInformation useful to debug error conditions. Not useful during productive operation.