Dear All,
To keep/save my mikrotik CCR1009-8g-1s’s syslog i installed kiwi syslog to my remote pc. But it’s failing. I configured my remote pc’s ip to “logging” option. Configured both Rules and Action. But don’t know which IP to configure in Kiwi syslog server console. Would anyone can guide me through?
I also use Kiwi on my desktop machine to collect some logs from my home MikroTik box.
I have deafult rules (one is to display in your Kiwi client, another one is “Log to file”), and I’ve edited “Log to file” to make different files monthly by entering “J:\path\to\folder%DateY4-%DateM2 NAME FOR YOUR LOGS.txt” to file path. Apart from that, I’ve entered DNS settings and set it to listen on UDP port:
On MIkroTik I’ve set remote logging facility to match
Note that I’ve allowed both Kiwi’s exe files in Windows firewall:
C:\Program Files (x86)\Syslogd\Syslogd_Manager.exe
C:\Program Files (x86)\Syslogd\Syslogd_Service.exe
These are the files that KIwi writes on my hard drive:
2012-11 EDITED NAME OF LOG FILE.txt
2012-12 EDITED NAME OF LOG FILE.txt
...
2017-06 EDITED NAME OF LOG FILE.txt
2017-07 EDITED NAME OF LOG FILE.txt
First of all let me thank you first for your response brother “Thank You”. Here in my mikrotik i’ve IP pool as well as static IP. i need to capture all PPPOE user’s activity. Thus, i need to send those logs to my remote PC. My remote/ PC is connected to LAN side with a static IP. I checked all your configuration but i think it’ll not work as from your screen shot i can see you are using a “source add”. Would you please guide me more?
It’s pretty straight forward:
Enter MikroTik’s address that you connect to from your PC (you have to make it reachable).
did u mean I have to use my wan ip?
Hi bro,
Below is the screenshot of my kiwi configuration and mikrotik configuration
Is it ok?
Yeah, it looks OK.
sorry, yet not working… turned off the firewall but still there’s no log…
Finally i got it, i check the error logs and i find in TCP i put the WAN IP in kiwi syslog configuration. For which binding failed error was showing. Thanks for all of your help
. Now my next move is can i put here real host ip of PPPOE user?