Layer7 API Management

 View Only
  • 1.  API Gateway hostname used in log sink to rsyslog

    Posted Feb 13, 2020 08:04 AM
    HI CA API community.

    We have API gateway 9.4 running on CentOS.

    We have log sink configured for rsyslog with "Log Hostname" checkbox ticked. Where the gateway sources the hostname seems strange. It's not using the hostname of the server, or cluster.hostname. Instead it seems to be doing a reverse DNS lookup on it's IP to determine the hostname passed to the rsyslog.

    I don't find CA documentation that explains this. Is this documented anywhere or is there configuration that controls this behavior.

    Thanks you
    Faizel


  • 2.  RE: API Gateway hostname used in log sink to rsyslog
    Best Answer

    Broadcom Employee
    Posted Feb 21, 2020 05:17 PM
    Edited by Christopher Hackett Feb 24, 2020 04:34 PM
    Hello,

    It should be enabled by default and provide the Gateway hostname. If this is not what you are seeing, then I would recommend opening a support case so we can review this with you as it may be environmental in nature meaning it could be a conflict with the syslog server endpoint. Screenshots of the configuration and of the hostname that you see would be helpful.

    Ref: https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-api-management/api-gateway/9-4/security-configuration-in-policy-manager/tasks-menu-security-options/manage-log-audit-sinks/log-sink-properties.html

    Dustin.

    ------------------------------
    Senior Technical Support Engineer
    Broadcom
    ------------------------------