Enable message logging (syslog) on a Conductor

How to set up Syslog on a Conductor.

If you do not already have Syslog set up, this article walks you through setting up Syslog-ng with TLS.

Download and install the most recent Syslog-ng.

Generate a self-signed certificate and public key xx, using the openssl command:

Openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout privateKey.key -out certificate.crt

Move the certificate and key to /etc/syslong-ng/conf.d.

Modify the Syslog-ng configuration file (/etc/syslog-ng/syslog-ng.conf) to add a section for TLS. This example logs the Tempered device logs to /var/log/twn.log:

@version: 3.8
@include "scl.conf"
      options {
         time-reap(30);
         mark-freq(10);
         keep-hostname(yes);
       };
    source s_local { system(); internal(); };
    source s_tls {
             tcp(ip(0.0.0.0) port(993)
             tls( key-file("/etc/syslog-ng/conf.d/domain.key")
             cert-file("/etc/syslog-ng/conf.d/domain.crt")
             peer-verify(optional-untrusted)));
        };
    destination d_logs {
        file("/var/log/tnw.log"
            owner("root")
            group("root")
            perm(0777)
            ); };

    log { source(s_tls); destination(d_logs); };

Important: Add this line to the source you wish to use: - peer-verify(optional-untrusted))

Restart the Syslog-ng service.
In your Conductor, go to Settings > General Settings, and scroll down to the Syslog Config.
Select Edit Settings
Type in the Syslog server address and port that you wish to use and check Use TLS encryption
Select Update Settings.