Documentation Index
Fetch the complete documentation index at: https://docs.socfortress.co/llms.txt
Use this file to discover all available pages before exploring further.
What this connector is
This connector covers how to configure OPNsense to forward logs to an external syslog server. Vendor reference:Configuration steps (OPNsense)
- Log into the OPNsense web interface
- Navigate to System → Settings → Logging
- Check Enable Remote Logging
- Enter the syslog server hostname/IP under Remote log servers
- optionally set port (default 514) and protocol (UDP/TCP)
- Click Save
Success criteria
- Logs appear in your SIEM input
- Source is attributed to the expected OPNsense device
Notes
- Ensure the network path is secure; consider VPN/TLS forwarding when logs traverse untrusted networks.
- Ensure firewall rules allow outbound syslog traffic.