I have some experience on routers and firewalls, but I’m kind of newbie on Mikrotik. We’re implementing some hotspots using routerboards (750GL, 951G and maybe a few other models) and I need to keep a copy of all logs. I configured a rsyslog server (Linux - Debian) to recieve logs, which worked fine. However, I’m kind of worried about the amount of data I’ll have to deal with on this rsyslog server, since we’re talking about, in near future, of hundreds of routerboards and thousands of users.
So, one of the alternatives I came up with is to make the folder where Mikrotik stores logs (firewall and web proxy) available over scp, so we can download and store logs from time to time.
Is that possible? If so, is it a good idea? Can you guys give us some other ideas?
Thank you for your answer, rextended. I’ve already set up a Linux box to recieve the logs and store them os a MySQL database, using rsyslogd. However, I need a way to store logs sent from several servers, over the Internet. I guess it’s not safe to recieve syslog logs over the Internet, without encryption. I’m also conserned about the amount of data sent from several servers over the Internet - that may compromise the Internet connection on the rsyslog server site.
If I had a VPN tunnel, would I be able to have Mikrotik sendig logs over the tunnel (the same Mikrotik being the VPN gateway)? On Linux systems, the gateway usually don’t “see” the remote peer by it’s VPN address. Do you know if Mikrotik systems behave the same way?