The syslog-ng agent for IBM System i is a system log collector and forwarder application for the IBM System i (formerly known as AS/400 and IBM iSeries) platform. It collects application and system messages, as well as messages from the System i security audit journal (QAUDJRN) and the operator message queue (QSYSOPR). The collected messages are forwarded to a syslog-ng server using regular or TLS-encrypted TCP connections. The syslog-ng server can run on a separate machine, or directly on IBM System i in the Portable Application Solutions Environment (PASE). The syslog-ng Agent for IBM System i is available as a standalone product and must be licensed independently from syslog-ng Premium Edition.
Main features
Reads application and system messages.
Collects messages from the System i security audit journal (QAUDJRN) and the operator message queue (QSYSOPR).
Transfers log messages using TCP.
Supports TLS encryption.
Authenticates the server using X.509 certificates. Mutual authentication is also supported.
Can filter system audit journal entries and send only the selected ones to the syslog server.
Supports both the syslog and the ArcSight Common Event Format (CEF).
Provides an API to send messages from custom applications to the central syslog server.
Has a native IBM System i configuration interface.
The syslog-ng Agent for IBM System i is available as a standalone product and must be licensed independently from syslog-ng Premium Edition.
BalaBit IT Security
Address: Budapest, Bártfai str. 54. H-1115, Hungary