Juniper syslog zabbix trapper monitoring idea.

[TheRiderU]

Hello community,

I have my Juniper firewall and this device sends me a syslog report to any server i want, it don't exist a syslog file on the juniper itself.
So i need to monitor this syslog report for specific word patterns.
so how can i do that? anyone have an idea?
my idea was that i send the syslog report to a Zabbix server and then monitor it with zabbix_agent(active) with log[] or logrt[].

[kernbug]

Hello community,

I have my Juniper firewall and this device sends me a syslog report to any server i want, it don't exist a syslog file on the juniper itself.
So i need to monitor this syslog report for specific word patterns.
so how can i do that? anyone have an idea?
my idea was that i send the syslog report to a Zabbix server and then monitor it with zabbix_agent(active) with log[] or logrt[].

Hi

Install and configure syslogd/syslog-ng/etc on Zabbix Server to receive syslog from Juniper hosts. And you will be able to monitor log files from Zabbix.

[TheRiderU]

Hi

Install and configure syslogd/syslog-ng/etc on Zabbix Server to receive syslog from Juniper hosts. And you will be able to monitor log files from Zabbix.

and the item or trigger will look like what? wich type i need to choose?

[kloczek]

Hello community,

I have my Juniper firewall and this device sends me a syslog report to any server i want, it don't exist a syslog file on the juniper itself.

Bettrer would be switch to use SNMP traps.

[kernbug]

Bettrer would be switch to use SNMP traps.

In all cases it's not bad to have logs from network devices.

[TheRiderU]

In all cases it's not bad to have logs from network devices.

So how can i filter the logs with the Zabbix items or triggers. wich type i need to choose?

[kernbug]

So how can i filter the logs with the Zabbix items or triggers. wich type i need to choose?

kloczek is right, you need to use SNMP checks/traps. Syslog logs are useful in case of problem analysis.

https://www.zabbix.com/documentation/3.4/manual/config/items/itemtypes/snmptrap