Forwarding user audit logs to a remote server

Audit logs contain a recording of all user activities. You can configure the Fabric Services System to send audit logs to a remote syslog server. The system uses the Fluent Bit utility to collect audit logs from the Digital Sandbox and Fabric Services System and forward the audit logs to a remote syslog server.

The settings for the remote syslog server are part of the sample-input.json file. You can configure a remote syslog server:
  • during the Fabric Services System application installation; for more information, see “Editing the installation configuration file” in the Fabric Services System Software Installation Guide
  • after the Fabric Services System application has been installed, as described in Configuring a remote syslog server for user audit logs
Note: The system currently supports one remote syslog server.