VII. Router Diagnostics
ExpiredDrayTek Syslog - Initial Setup
Syslog is a method of logging router activity. When enabled, the router continuously outputs syslog event messages; these can be captured by a syslog daemon (a listening/capturing program) and displayed or logged to a file.
The latest version of the DrayTek Syslog Utility can be downloaded here. It is a standalone application that does not require installation. It can be set to on startup (runs as an application, not a service). Syslog output from the router is in a standard format and can be captured with other Syslog applications if required.
Syslog has many different methods to collect logs from the router; sent locally (stored in a log file or a database), stored on USB storage connected to the router or sent over the internet.
This uses UDP Port 514 by default, which needs to be allowed through any software firewalls if sending to a PC, or forwarded through NAT if forwarding syslog over the internet.
| Sending Syslog to a PC - Log File | This is recommended for quick diagnostics or investigating configuration issues, for instance determining which rule in the firewall is blocking traffic. This can be used to record syslog messages from multiple routers and access points. |
| Sending Syslog to a PC - Database | This can be used for collecting log information from the router over a longer period of time. The Database can be loaded into the DrayTek Syslog Utility to read the contents. This records syslog messages from a single router. |
| Storing Syslog via USB Storage | This can be used for collecting log information from the router over a longer period of time and makes reading the logs remotely more easily possible. This stores log files in text format that can be loaded in the Syslog Utility. |
| Web Syslog | This can be used to view recent syslog messages from the router. It can be useful for quick diagnostics when accessing the router remotely. |
Sending Syslog to a PC - Log File
Go to [System Maintenance] > [Syslog / Mail Alert Setup] to enable the Syslog access and click OK to apply the setting.
a. Check the Enable state.
b. Check the Syslog Server state so that the router will send Syslog messages to an IP address.
c. Enter the Server IP Address as the IP of your computer. The server IP address can be a local IP or remote IP/Host name.
The router will begin to send syslog messages as soon as the OK button is clicked.
Now the PC needs to be set up to save the syslog messages. Launch the Syslog Utility on your computer, it should show the router's IP in d., if it does not, check whether the Windows Firewall is blocking UDP port 514 and make sure that either the application or that traffic is unblocked. Also check whether any other utilities on the computer could be using that port, if they are, that will also stop syslog from working.
a. Click this icon to set up Syslog to save a log file.
b. Click this icon to set up Syslog to save logs to a database.
c. Click this icon to search the database that the utility has saved or open a syslog database file.
d. Select the router's IP, if there are multiple routers that the computer is receiving syslog from.
e. Select the WAN interface to show details for each WAN interface.
Click on the button marked a. to save the log file output.
That will pop-up a window to set how the log files are saved:
a. Select the saving mode:
Save current log to a file - This will save the currently displayed content of the Syslog utility's logs to a file. This is recommended for short logs, because the utility will not save syslog entries that are no longer displayed in the utility.
Record log to a file in real time - This will save the log file as a single file for as long as the record time limit is set to. If No Record Time Limit is set, it will log until the utility is closed or the Stop button is pressed, the Stop button will appear in the utility when this log saving method is active.
Record log to multiple files - This will save the syslog output to multiple files depending on the Save to a file every (x) Hours setting, which will make a new log file every (x) hours. It will record for as long as the Record Time Limit is set to. If No Record Time Limit is set, it will log until the utility is closed or the Stop button is pressed, the Stop button will appear in the utility when this log saving method is active.
Selecting Auto Launch will make the DrayTek Syslog utility start when the computer starts up, once a user logs in to the computer.
Set the Log File name location manually or click the "..." box to the right of it to specify the location.
Click OK to start the logging, the pop-up window will close and if the utility is set to Record log to a file in real time or Record log to multiple files, the utility will show a Stop button in place of the Save button icon. Clicking the Stop button will stop the log file from continuing to save.
- First Published: 18/03/2013
- Last Updated: 09/08/2021