If you are using rsyslog you can add another action to the observium syslog section of your rsyslog.  

For example in my /etc/rsyslog.d/30-observium.conf file we have the following

 

# observium RuleSets

ruleset(name="observium") {

    action(type="omprog"

           binary="/opt/observium/syslog.php"

           template="observium")

 

    action(type="omfwd"

           Target="XXX.XXX.XXX.XXX"

           Port="514"

                   Protocol="udp"

                   Device="eth0")

 

    stop

}

 

This inserts in the dba and streams the syslog to a central syslog server for archives etc.

 

From: observium <observium-bounces@observium.org> on behalf of Observium System <observium@observium.org>
Reply-To: Observium System <observium@observium.org>
Date: Wednesday, March 3, 2021 at 11:18 AM
To: Observium System <observium@observium.org>
Cc: Shawn L <shawnl@up.net>
Subject: [Observium] Syslog Integration

 

We recently implemented syslog integration.  One thing that we miss however is having the logs in the syslog file.  It's great to see them in Observium, but there are times where it's easier to grep the syslog file itself to see what's going on.

 

Is there a way to keep the log entries in the syslog files, and still deliver copies to Observium?

 

Thanks

 

Shawn