If you are using rsyslog you can add another action to the observium syslog section of your rsyslog. For example in my /etc/rsyslog.d/30-observium.conf file we have the following

# observium RuleSets ruleset(name="observium") { action(type="omprog" binary="/opt/observium/syslog.php" template="observium")

action(type="omfwd" Target="XXX.XXX.XXX.XXX" Port="514" Protocol="udp" Device="eth0")

stop }

This inserts in the dba and streams the syslog to a central syslog server for archives etc.

From: observium observium-bounces@observium.org on behalf of Observium System observium@observium.org Reply-To: Observium System observium@observium.org Date: Wednesday, March 3, 2021 at 11:18 AM To: Observium System observium@observium.org Cc: Shawn L shawnl@up.net Subject: [Observium] Syslog Integration

We recently implemented syslog integration. One thing that we miss however is having the logs in the syslog file. It's great to see them in Observium, but there are times where it's easier to grep the syslog file itself to see what's going on.

Is there a way to keep the log entries in the syslog files, and still deliver copies to Observium?

Thanks

Shawn