Nagios Log Server .pem files?

[chartley]

I have .pem files that are on my syslog server that are used for devices that are communicating with it in our SD-WAN environment. I have installed the nagios log server and would like to use that for incoming syslog messages. I see hosts that are communicating with the Nagios Log Server in the Dashboard view of the GUI, but I believe that the messages are encrypted. Can the Nagios Log Server utilize .pem files just like a normal syslog server would?....and where would I put the .pem files for Nagios to utilize them.

[ssax]

Here is how I got it to work, I had to setup a new tcp input on a different port number and point the encrypted hosts to that port:

Code: Select all

mkdir /usr/local/nagioslogserver/logstash/etc/ssl/

Put your cert/key in /usr/local/nagioslogserver/logstash/etc/ssl/.

Then run this command:

Code: Select all

chown nagios.nagios /usr/local/nagioslogserver/logstash/etc/ssl/*

Add this to Configure > Global Config > Inputs as a new input:

Code: Select all

tcp {
    type => 'syslog'
    port => 5545
    ssl_enable => true
    ssl_cert => "/usr/local/nagioslogserver/logstash/etc/ssl/server-cert.pem"
    ssl_key => "/usr/local/nagioslogserver/logstash/etc/ssl/server-key.pem"
    ssl_verify => false
}

Save and Apply and then test.