Syslog

Test suite to check syslog

Test Syslog

Description

Show the system host name and check the syslog message

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog global level info

Step 2: Run command show host name at DUT0 and expect this output:

Show output
osdx

Step 3: Run command file show running://log/messages | tail -n 5 at DUT0 and check if output matches the following regular expressions:

executed a new command: 'show host name'
Show output
2025-10-10 19:37:26.810223 daemon-err , cfgd[1464]:  [246586]Command output: File name reserved Value validation failed
2025-10-10 19:37:31.001976 daemon-notice , cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10 19:37:31.004831 auth-notice , OSDxCLI:  User 'admin' committed the configuration.
2025-10-10 19:37:31.027167 auth-notice , OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10 19:37:31.144247 auth-notice , OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog File

Description

Create a new DHCP server and collect all the syslog messages produced by systemd.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog file systemd_msg filter def app systemd
set system syslog file systemd_msg filter def level info

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth1 address 192.168.100.100/24
set service dhcp-server shared-network test subnet 192.168.100.0/24 start 192.168.100.150 stop 192.168.100.155
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog file systemd_msg filter def app systemd
set system syslog file systemd_msg filter def level info

Step 3: Run command file show running://log/user/systemd_msg/systemd_msg | cat at DUT0 and check if output matches the following regular expressions:

systemd\[1\]:\s+Started.*"DHCP Server Service instance main"\.
Show output
2025-10-10 19:37:36.949380 daemon-info , systemd[1]:  Created slice system-dhcpd.slice - Slice /system/dhcpd.
2025-10-10 19:37:36.963452 daemon-info , systemd[1]:  Started dhcpd@main.service - "DHCP Server Service instance main".

Test Syslog File Rotate

Description

Create a new DHCP server and collect all syslog messages produced by systemd. This test also rotates 10 saved files when a file weighing 100 kbytes is used.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog file systemd_msg archive files 10
set system syslog file systemd_msg archive size 100
set system syslog file systemd_msg filter def app systemd
set system syslog file systemd_msg filter def level info

Step 2: Set the following configuration in DUT0 :

set interfaces ethernet eth1 address 192.168.100.100/24
set service dhcp-server shared-network test subnet 192.168.100.0/24 start 192.168.100.150 stop 192.168.100.155
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog file systemd_msg archive files 10
set system syslog file systemd_msg archive size 100
set system syslog file systemd_msg filter def app systemd
set system syslog file systemd_msg filter def level info

Step 3: Run command file show running://log/user/systemd_msg/systemd_msg | cat at DUT0 and check if output matches the following regular expressions:

Started.*"DHCP Server Service instance main"\.
Show output
2025-10-10 19:37:43.165978 daemon-info , systemd[1]:  Started dhcpd@main.service - "DHCP Server Service instance main".

Test Syslog Regex

Description

Create a new syslog file and collect all the syslog messages matching a specified regex.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog file cli_msg filter CLI app OSDxCLI
set system syslog file cli_msg filter CLI level notice
set system syslog file cli_msg filter CLI regex '(^|[^a-zA-Z0-9_])alert([^a-zA-Z0-9_]|$)'

Step 2: Run command command with alert word at DUT0 and expect this output:

Show output
Command validation failed:
CLI Error: Invalid token [command]
CLI Error: Command error

Step 3: Run command command with alerted word at DUT0 and expect this output:

Show output
Command validation failed:
CLI Error: Invalid token [command]
CLI Error: Command error

Step 4: Run command file show running://log/user/cli_msg/cli_msg | cat at DUT0 and expect this output:

Show output
2025-10-10 19:37:49.539422 auth-notice , OSDxCLI:  User 'admin' entered an invalid command: 'command with alert word'.

Test Syslog Remote

Description

Add a remote host to send syslog messages and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 port 514
set system syslog host 10.215.168.1 protocol udp

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.143 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.143/0.143/0.143/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/10.215.168.64/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:37:54.957391+00:00 10.215.168.64  2025-10-10T19:37:54.395150+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:37:54.957391+00:00 10.215.168.64  2025-10-10T19:37:54.406092+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:37:54.957391+00:00 10.215.168.64  2025-10-10T19:37:54.421011+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:37:55.138904+00:00 10.215.168.64  2025-10-10T19:37:54.606679+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
2025-10-10T19:37:55.195749+00:00 10.215.168.64  2025-10-10T19:37:54.663459+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote With VRF

Description

Add a remote host to send syslog messages through a VRF and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth0 vrf VRF0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 local-vrf VRF0
set system syslog host 10.215.168.1 port 514
set system syslog host 10.215.168.1 protocol udp
set system vrf VRF0

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 vrf VRF0 count 1 size 56 timeout 1
Show output
ping: Warning: source address might be selected on device other than: VRF0
PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 VRF0: 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.121 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.121/0.121/0.121/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/10.215.168.64/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:37:55.641459+00:00 10.215.168.64  2025-10-10T19:37:55.105213+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show version'.
2025-10-10T19:37:55.879879+00:00 10.215.168.64  2025-10-10T19:37:55.347687+00:00 user-warning osdx OSDxCLI:  Signal 10 received
2025-10-10T19:37:55.894957+00:00 10.215.168.64  2025-10-10T19:37:55.362579+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'set system mode user'.
2025-10-10T19:37:56.858330+00:00 10.215.168.64  2025-10-10T19:37:56.325958+00:00 auth-notice osdx OSDxCLI:  User 'admin' entered the configuration menu.
2025-10-10T19:37:56.940808+00:00 10.215.168.64  2025-10-10T19:37:56.408361+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'delete '.
2025-10-10T19:37:57.012706+00:00 10.215.168.64  2025-10-10T19:37:56.480352+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'.
2025-10-10T19:37:57.104738+00:00 10.215.168.64  2025-10-10T19:37:56.571696+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'show working'.
2025-10-10T19:37:57.164106+00:00 10.215.168.64  2025-10-10T19:37:56.631894+00:00 daemon-info osdx ubnt-cfgd[251557]:  inactive
2025-10-10T19:38:00.647427+00:00 10.215.168.64  2025-10-10T19:37:59.662814+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:00.658482+00:00 10.215.168.64  2025-10-10T19:37:59.674033+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:00.675977+00:00 10.215.168.64  2025-10-10T19:37:59.691556+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:00.816434+00:00 10.215.168.64  2025-10-10T19:37:59.831990+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 vrf VRF0 count 1 size 56 timeout 1'.
2025-10-10T19:38:00.869936+00:00 10.215.168.64  2025-10-10T19:37:59.885489+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote With Interface

Description

Add a remote host to send syslog messages through a specific interface and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 local-interface eth0
set system syslog host 10.215.168.1 port 514
set system syslog host 10.215.168.1 protocol udp

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.095 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.095/0.095/0.095/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/10.215.168.64/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:38:01.298014+00:00 10.215.168.64  2025-10-10T19:38:00.313520+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show version'.
2025-10-10T19:38:01.529613+00:00 10.215.168.64  2025-10-10T19:38:00.545127+00:00 user-warning osdx OSDxCLI:  Signal 10 received
2025-10-10T19:38:01.544183+00:00 10.215.168.64  2025-10-10T19:38:00.559518+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'set system mode user'.
2025-10-10T19:38:02.386247+00:00 10.215.168.64  2025-10-10T19:38:01.401683+00:00 auth-notice osdx OSDxCLI:  User 'admin' entered the configuration menu.
2025-10-10T19:38:02.439415+00:00 10.215.168.64  2025-10-10T19:38:01.454728+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'delete '.
2025-10-10T19:38:02.563426+00:00 10.215.168.64  2025-10-10T19:38:01.578653+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'.
2025-10-10T19:38:02.638180+00:00 10.215.168.64  2025-10-10T19:38:01.653633+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'show working'.
2025-10-10T19:38:02.743956+00:00 10.215.168.64  2025-10-10T19:38:01.759357+00:00 daemon-info osdx ubnt-cfgd[251901]:  inactive
2025-10-10T19:38:06.267966+00:00 10.215.168.64  2025-10-10T19:38:05.442771+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:06.279518+00:00 10.215.168.64  2025-10-10T19:38:05.454330+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:06.311323+00:00 10.215.168.64  2025-10-10T19:38:05.486329+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:06.451826+00:00 10.215.168.64  2025-10-10T19:38:05.626846+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
2025-10-10T19:38:06.512690+00:00 10.215.168.64  2025-10-10T19:38:05.687678+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote With Local-address and UDP

Description

Add a remote host to send syslog messages through a specific local-address and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 33.33.33.33/24
set interfaces ethernet eth0 address 10.215.168.64/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 local-address 33.33.33.33
set system syslog host 10.215.168.1 port 514
set system syslog host 10.215.168.1 protocol udp

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.144 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.144/0.144/0.144/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/33.33.33.33/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:38:12.000694+00:00 33.33.33.33  2025-10-10T19:38:11.605456+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:12.013746+00:00 33.33.33.33  2025-10-10T19:38:11.618830+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:12.040750+00:00 33.33.33.33  2025-10-10T19:38:11.645871+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:12.190973+00:00 33.33.33.33  2025-10-10T19:38:11.795925+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
2025-10-10T19:38:12.248047+00:00 33.33.33.33  2025-10-10T19:38:11.853057+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote With Local-address and VRF

Description

Add a remote host to send syslog messages through a VRF and a local-address and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 33.33.33.33/24
set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth0 vrf VRF0
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 local-address 33.33.33.33
set system syslog host 10.215.168.1 local-vrf VRF0
set system syslog host 10.215.168.1 port 514
set system syslog host 10.215.168.1 protocol udp
set system vrf VRF0

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 vrf VRF0 count 1 size 56 timeout 1
Show output
ping: Warning: source address might be selected on device other than: VRF0
PING 10.215.168.1 (10.215.168.1) from 10.215.168.64 VRF0: 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.133 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.133/0.133/0.133/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/33.33.33.33/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:38:12.690137+00:00 33.33.33.33  2025-10-10T19:38:12.295206+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show version'.
2025-10-10T19:38:12.990362+00:00 33.33.33.33  2025-10-10T19:38:12.595260+00:00 user-warning osdx OSDxCLI:  Signal 10 received
2025-10-10T19:38:13.014726+00:00 33.33.33.33  2025-10-10T19:38:12.619741+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'set system mode user'.
2025-10-10T19:38:13.828187+00:00 33.33.33.33  2025-10-10T19:38:13.433196+00:00 auth-notice osdx OSDxCLI:  User 'admin' entered the configuration menu.
2025-10-10T19:38:13.889951+00:00 33.33.33.33  2025-10-10T19:38:13.494898+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'delete '.
2025-10-10T19:38:13.993572+00:00 33.33.33.33  2025-10-10T19:38:13.598496+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'set system login user admin authentication encrypted-password $6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'.
2025-10-10T19:38:14.055843+00:00 33.33.33.33  2025-10-10T19:38:13.660867+00:00 auth-notice osdx OSDxCLI:  User 'admin' added a new cfg line: 'show working'.
2025-10-10T19:38:14.146225+00:00 33.33.33.33  2025-10-10T19:38:13.751238+00:00 daemon-info osdx ubnt-cfgd[252573]:  inactive
2025-10-10T19:38:17.920423+00:00 33.33.33.33  2025-10-10T19:38:17.772781+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:17.920423+00:00 33.33.33.33  2025-10-10T19:38:17.772942+00:00 syslog-warning osdx rsyslogd:  bound address 33.33.33.33 IP free [v8.2302.0 try https://www.rsyslog.com/e/2186 ]
2025-10-10T19:38:17.934712+00:00 33.33.33.33  2025-10-10T19:38:17.787262+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:17.949540+00:00 33.33.33.33  2025-10-10T19:38:17.802180+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:18.116390+00:00 33.33.33.33  2025-10-10T19:38:17.969001+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 vrf VRF0 count 1 size 56 timeout 1'.
2025-10-10T19:38:18.172926+00:00 33.33.33.33  2025-10-10T19:38:18.025533+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote Single TLS

Description

Add a secured remote host to send syslog messages and show the host name.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 port 10514
set system syslog host 10.215.168.1 protocol tcp
set system syslog host 10.215.168.1 tls ca 'running://ca.crt'
set system syslog host 10.215.168.1 tls permitted-peer rsyslog.server.com

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.205 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.205/0.205/0.205/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/10.215.168.64/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:38:23.980889+00:00 10.215.168.64  2025-10-10T19:38:23.602674+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:24.022782+00:00 10.215.168.64  2025-10-10T19:38:23.614279+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:24.022782+00:00 10.215.168.64  2025-10-10T19:38:23.641342+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:24.022782+00:00 10.215.168.64  2025-10-10T19:38:23.791764+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
2025-10-10T19:38:24.022782+00:00 10.215.168.64  2025-10-10T19:38:23.859985+00:00 syslog-warning osdx rsyslogd:  warning: certificate file is not set [v8.2302.0 try https://www.rsyslog.com/e/2330 ]
2025-10-10T19:38:24.022782+00:00 10.215.168.64  2025-10-10T19:38:23.860057+00:00 syslog-warning osdx rsyslogd:  warning: key file is not set [v8.2302.0 try https://www.rsyslog.com/e/2331 ]
2025-10-10T19:38:26.267154+00:00 10.215.168.64  2025-10-10T19:38:26.172326+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.

Test Syslog Remote Local Address Single TLS

Description

Add a secured remote host to send syslog messages and show the host name from a fiven local-address

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces dummy dum0 address 33.33.33.33/24
set interfaces ethernet eth0 address 10.215.168.64/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system syslog host 10.215.168.1 filter def level info
set system syslog host 10.215.168.1 local-address 33.33.33.33
set system syslog host 10.215.168.1 port 10514
set system syslog host 10.215.168.1 protocol tcp
set system syslog host 10.215.168.1 tls ca 'running://ca.crt'
set system syslog host 10.215.168.1 tls permitted-peer rsyslog.server.com

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.133 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.133/0.133/0.133/0.000 ms

Step 3: Run command show host name at DUT0 and expect this output:

Show output
osdx

Note

Check the server /var/log/33.33.33.33/.log file and read the executed a new command: 'show host name' log message:

Show output
2025-10-10T19:38:31.955822+00:00 33.33.33.33  2025-10-10T19:38:30.790707+00:00 daemon-notice osdx cfgd[1464]:  [246586]Completed change to active configuration
2025-10-10T19:38:31.998767+00:00 33.33.33.33  2025-10-10T19:38:30.802171+00:00 auth-notice osdx OSDxCLI:  User 'admin' committed the configuration.
2025-10-10T19:38:31.998767+00:00 33.33.33.33  2025-10-10T19:38:30.830010+00:00 auth-notice osdx OSDxCLI:  User 'admin' left the configuration menu.
2025-10-10T19:38:31.998767+00:00 33.33.33.33  2025-10-10T19:38:30.935763+00:00 syslog-warning osdx rsyslogd:  warning: certificate file is not set [v8.2302.0 try https://www.rsyslog.com/e/2330 ]
2025-10-10T19:38:31.998767+00:00 33.33.33.33  2025-10-10T19:38:30.935825+00:00 syslog-warning osdx rsyslogd:  warning: key file is not set [v8.2302.0 try https://www.rsyslog.com/e/2331 ]
2025-10-10T19:38:32.017075+00:00 33.33.33.33  2025-10-10T19:38:31.007050+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'ping 10.215.168.1 count 1 size 56 timeout 1'.
2025-10-10T19:38:32.229288+00:00 33.33.33.33  2025-10-10T19:38:31.219212+00:00 auth-notice osdx OSDxCLI:  User 'admin' executed a new command: 'show host name'.