syslog-ng Agent for IBM System i

A syslog agent for IBM System i platforms

The syslog-ng agent for IBM System i is a system log collector and forwarder application for the IBM System i (formerly known as AS/400 and IBM iSeries) platform. It collects application and system messages, as well as messages from the System i security audit journal. The collected messages are forwarded to a syslog-ng server using regular or TLS-encrypted TCP connections. The syslog-ng server can run on a separate machine, or directly on IBM System i in the Portable Application Solutions Environment (PASE).

Main features

  • Reads application and system messages.
  • Collects messages from the System i security audit journal (QAUDJRN) and the operator message queue (QSYSOPR).
  • Transfers log messages using TCP.
  • Supports TLS encryption.
  • Authenticates the server using X.509 certificates. Mutual authentication is also supported.
  • Can filter system audit journal entries and send only the selected ones to the syslog server.
  • Supports both the syslog and the ArcSight Common Event Format (CEF).
  • Provides an API to send messages from custom applications to the central syslog server.
  • Has a native IBM System i configuration interface.

Supported platforms

The syslog-ng server can be installed on any IBM System i into the Portable Application Solutions Environment (PASE). The syslog-ng Agent for IBM System i application is available for any version of IBM OS/400 or i5/OS from V5R1 and later.

The syslog-ng Agent for IBM System i is available as a standalone product and must be licensed independently from syslog-ng Premium Edition.

Evaluate