Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved


Chapter 7 Universal Collector Microagent Management : Forwarding Logs

Forwarding Logs
Universal Collector microagent collects the information from various types of log sources and forwards them to an LogLogic LMI server or syslog server.
The logs are forwarded to a LogLogic LMI server or syslog server. For the LogLogic LMI server the proprietary ULDP protocol is used and for Syslog server UDP or TCP protocols are used. Universal Collector microagent sends a maximum of 1 MB log message per line using TCP (Syslog) forwarder.
Ensure that the jumbo message support is enabled for TIBCO LogLogic Log Management Intelligence.
A file is identified by a file identifier usually a string representing the path name of the file in the source device.
Forwarding Logs to LogLogic LMI
For the LogLogic LMI server, the proprietary ULDP protocol is used.You can configure the LogLogic LMI forwarding connection using the following steps:
1.
In the Hawk Console, click the UC Configuration tab in the upper-right corner.
2.
Select Domain and Agent from the dropdown list.
3.
Click Forwarders tab.
4.
From the New dropdown list, select ULDP.
You can modify the following fields in the LogLogic LMI forwarding connection:
NOTE: If you have Java 1.8.0 update 201 and higher version installed, you must enable both the authentication and encryption settings for Secured ULDP forwarder.
NOTE: The security certificate must be available at the Hawk Agent. You must specify the path of the security certificate in the following fields.
Specify the path of the root CA certificate stored in *.pem format.
Specify the path of the UC PKCS#12 Certificate in *.p12 format.
Specify the path of the root CA certificate stored in *.p12 format.
Specify the path of the UC JKS Certificate in *.jks format.
Creating a TCP or UDP Syslog Connection
For Syslog server, UDP or TCP protocols are used. You can configure the TCP or UDP syslog connection using the following steps:
 
1.
In the Hawk Console, click the UC Configuration tab in the upper-right corner.
2.
Select Domain and Agent from the dropdown list.
3.
Click Forwarders tab.
4.
From the New dropdown list, select TCP(Syslog) or UDP(Syslog).
You can modify the following fields in the TCP or UDP syslog forwarding connection:
NOTE: The security certificate must be available at the Hawk Agent. You must specify the path of the security certificate in the following fields.
Specify the path of the security certificate in *.pem format.
Specify the path of the Private Key file in .pem format.
Specify the path of the root CA certificate stored in *.pem format.
Specify the path of the UC PKCS#12 certificate in *.p12 format.
Specify the path of the UC JKS certificate in *.jks format.
Copying Forwarder
To copy a forwarder, click Copy icon in the Actions column of the Forwarder.
The copied Forwarders are displayed below the list of forwarders with the name Forwarder_name_copy.
Deleting Forwarder
To delete a Forwarder, click Delete icon in the Actions column of the Forwarder.
Deploying Forwarder
You can deploy Forwarder to one or more hawk agents.
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. Click Deploy to icon in the Actions column of the Forwarder you want to deploy.
3. In Deploy Forwarder to window, select Hawk agents to which you want to deploy the Forwarder and click Yes.
Importing Forwarders
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. On the Forwarders tab, click import icon beside New dropdown list.
3. Click Open.
Result
If the import is successful, the imported Forwarder is listed on the Forwarders tab.
Exporting Forwarders
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. On the Forwarders tab, export the Forwarder by using either of the following ways:
3. In the Save As window, browse to the location where you want to save the .xml or .zip file and click Save.
Editing Forwarders
You can edit Forwarder configuration using edit icon in the Actions column of Forwarders list.
 

Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved