| 1 | # [OPNSense Syslog Forwarding](https://docs.opnsense.org/manual/settingsmenu.html#logging) |
| 2 | |
| 3 | This process involves configuring the OPNSense firewall to send logs to an external syslog server. |
| 4 | To configure a remote syslog server in OPNsense, follow these steps: |
| 5 | |
| 6 | ### Access OPNsense Web Interface: |
| 7 | |
| 8 | - Open a web browser and navigate to the web interface of your OPNsense firewall. |
| 9 | - Enter your administrative credentials to log in. |
| 10 | |
| 11 | ### Step 2: Configuring the Syslog Server |
| 12 | |
| 13 | Navigate to System Logs: |
| 14 | |
| 15 | - In the OPNsense web interface, go to _System_ > _Settings_ > _Logging_. |
| 16 | |
| 17 | Configure Remote Syslog Server: |
| 18 | |
| 19 | - Check the box next to _Enable Remote Logging_ to enable remote logging. |
| 20 | - Enter the IP address or hostname of your remote syslog server in the _Remote log servers_ field. |
| 21 | - Optionally, specify the port number (default is 514) and protocol (UDP or TCP) for remote logging. |
| 22 | - Click _Save_ to apply the changes. |
| 23 | |
| 24 | ### Verify Configuration: |
| 25 | |
| 26 | - Once the configuration is saved, OPNsense will start sending syslog messages to the specified remote syslog server. |
| 27 | - You can verify that syslog messages are being received on the remote syslog server by checking its logs or monitoring tools. |
| 28 | |
| 29 | ### Additional Considerations |
| 30 | |
| 31 | - **Security:** Ensure that the network path between your OPNSense firewall and the syslog server is secure. Consider using VPNs or IPsec tunnels if the logs contain sensitive information. |
| 32 | - **Firewall Rules:** Ensure there are no firewall rules blocking the outgoing traffic on the port used for syslog. |
| 33 | - **Backup Configurations:** Always keep a backup of your firewall configurations before making significant changes. |