I Install version 220.127.116.11 and I have admin and nextcloud log. I wonder how can I feed both file and syslog at the same time? Because I will send audit log to SIEM but I want to keep in server at the same time
'log_type' => 'file' 'logfile' => '/data/nextcloud.log' 'log_type' => 'syslog' 'syslog_tag' => 'Nextcloud', 'log.condition' => array ( 'apps' => array ( 0 => 'admin_audit', ), ), );
can be used?
I try to use rsyslog to forward audit.log to remote syslog server but I get permission denied message. Even I set chmod 777 audit.log, nothing change. Anybody can achieve this?