Solved: zabbix application logs

muniraja1 · 12-14-2023 10:16 PM

Hi SIEM Team,

Could you please us that we are unable to Collete the Zabbix application logs? The Zabbix application is running on Linux Centos 8 .6 . The server has been hosted on On-premises.

deeshu

Chronicle has four options for data ingestion. Where your Zabbix logs are stored? Does it support syslog forwarding or storing the log files in a central server or end number of endpoints? If the log files are in *nix then you can leverage rsylog to foward it to Chronicle Forwarder.

BTW. Chronicle doesn't have a parser for Zabbix so you'll have to write a custom parser for it.

View solution in original post

deeshu

Chronicle has four options for data ingestion. Where your Zabbix logs are stored? Does it support syslog forwarding or storing the log files in a central server or end number of endpoints? If the log files are in *nix then you can leverage rsylog to foward it to Chronicle Forwarder.

BTW. Chronicle doesn't have a parser for Zabbix so you'll have to write a custom parser for it.

muniraja1

Thanks for the information