How to configure logging to send Operations Console events to the syslog,

[JanVergeer]

In the release notes for 8.2 SP1 patch 4 (on page 9) it is stated : "After installing SP1 Patch 3 or later and configuring logging to send Operations Console events to the syslog, do the following to restart the RSA admin service"

But how exactly do you configure RSA AM to send Operations Console events to the syslog? I expect the OC message to be included in the imsOCSystem.log. And the security console only has the option to configure a syslog server for the imsSystem.log

[EdwardDavis · Accepted solution]

You don't need to do anything if you already have syslog set up. I have syslog set up, all three items in the logging section of security console...and patched up to 8.2 sp1 p4, and can see ops console logins, manage radius, identity source changes...etc in my syslog.