Syslog

Dashboard Location: Network-wide > Configure > General > Reporting

Syslog server configuration in Meraki enables centralized logging and monitoring by forwarding network events, security logs, and operational data to external log management systems. Syslog integration supports comprehensive network visibility, compliance reporting, and security incident analysis through standardized log forwarding to SIEM platforms, log aggregators, and monitoring solutions. This functionality provides role-based log filtering, ensuring relevant events are sent to appropriate monitoring systems based on operational requirements.

Example-1: The example below demonstrates basic syslog configuration for a small office deployment with essential event logging to a central syslog server.

This configuration establishes centralized logging by configuring syslog servers to receive network events and operational data from Meraki devices. The configuration defines a syslog server using environmental variable “syslog_server_ip” listening on UDP port 514 (standard syslog port). The roles specify which types of logs to forward: “Appliance event log” sends MX security appliance events (firewall, VPN, security events), “Switch event log” sends MS switch events (port status, configuration changes, STP events), and “Wireless event log” sends MR access point events (client connections, RF changes, security events). This configuration enables centralized log collection for compliance, monitoring, and security analysis.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              syslog_servers:
                - host: 1.2.3.4
                  port: 514
                  roles:
                    - Switch event log
                    - Air Marshal events
                    - Flows
                    - URLs
                    - Wireless event log
                    - Appliance event log