On Mon, Jul 14, 2025 at 5:09 PM Brad Turnbough < [email protected]> wrote:
> Is is possible to forward connection history, action history…etc … in guac > over to a syslog server? > > > > I know this data is logged to a SQL server, but I would also like to fork > this data over to a syslog server as well for SIEM purposes. > > > It's definitely possible, in a number of ways, although none of them is really implemented "out of the box." The two possibilities I can think of for what you're asking are: * It may be possible to "monitor" a table in your database and send a particular field to Syslog. I can't readily locate instructions right now on how to do this, but I'm almost certain its possible. * Write a decorating extension that takes the data and either copies it or writes it to syslog in addition to or instead of the database. The other possibility is that some of the data is already written to the Tomcat logs (catalina.out, for example), and Tomcat supports replacing the standard logger with log4j, which can write to Syslog. Hope that helps - any further questions feel free to post back here. -Nick >
