Skip to main content
Mezmo ingests Syslog data by placing an OpenTelemetry (OTel) Collector between your Syslog senders and Mezmo. The Collector receives Syslog over TCP or UDP with its syslog receiver, then forwards the parsed logs to Mezmo’s OpenTelemetry Source using the otlphttp exporter.

​
Set Up Syslog Log Ingestion

  1. Log in to the Mezmo Web App, create (or open) a Pipeline, and add an OpenTelemetry Source. Note the ingestion key — you’ll use it as apikey.
  2. Download the otelcol-contrib distribution, which includes the syslog receiver, from the OpenTelemetry website.
  3. Create a configuration file config.yaml:
Set protocol to rfc5424 or rfc3164 depending on the format your Syslog sender uses, and swap the tcp block for a udp block if you’re sending over UDP instead. Consult your local Syslog man page and the Collector syslog receiver documentation for full configuration details.
  1. Point your Syslog senders at the host and port where the Collector’s syslog receiver is listening.
  2. Start the Collector:
Logs will begin appearing in the Mezmo Log Viewer once the Collector starts forwarding data.