Forwarding user audit logs to a remote server
Audit logs contain a recording of all user activities. You can configure the Fabric Services System to send audit logs to a remote syslog server. The system uses the Fluent Bit utility to collect audit logs from the Digital Sandbox and Fabric Services System and forward the audit logs to a remote syslog server.
The settings for the remote syslog server are part of the
sample-input.json file. You can configure a remote syslog
server:
- during the Fabric Services System application installation; for more information, see “Editing the installation configuration file” in the Fabric Services System Software Installation Guide
- after the Fabric Services System application has been installed, as described in Configuring a remote syslog server for user audit logs
Note: The system currently supports one remote syslog
server.