"Analysis of Citrix Netscaler logs produces empty report"
I work in security. I am attempting to audit connections to my companies VPN. My company uses Citrix NetScalers for the VPN. I can create a profile. sawmill detects the format as Citrix Netscaler but then says "No syslog detected". If I continue without selecting a syslog server I get an empty report. I talked with my IT security admin and he says they are using a generic Linux syslog server. If I select a generic syslog server I still get an empty report. Any suggestions?
1. "RE: Citrix Netscaler logs produces empty report"
In response to message #0
LAST EDITED ON Mar-18-13 AT 12:23 PM (PDT)
From your log sample, the syslog header is not currently supported. We can add support for this. Can you give us some more details on the Linux distribution and syslog version.