cmdReporter Wiki

Open navigation

TLS Remote Logging Preferences

Overview

This article describes the preference keys available to configure the cmdReporter TLS remote logging interface.


Remote Logging Preferences (TLS Syslog)

All preference keys are required unless marked (Optional)

KeyValue TypeSample ValueFunction
LogRemoteEndpointEnabledbooltrueEnable network transmission of log data
LogRemoteEndpointTypeStringTLSType of remote log aggregation server. Used to define network protocol and preferences used
LogRemoteEndpointURLStringtls://server.address:9977URL where log data is to be sent. Applies to all remote logging types. tls:// prepend is required
SyslogFormatEnabledBoolfalse(Optional) Print log entries with syslog headers and the full event json in the body of the message.
LogRemoteEndpointTLSDictionary-Container dictionary for TLS preferences, no preferences directly set to this key.

TLSServerCertificateArray of Strings
server.company.com
intemediate ca name
root_ca-name
Public TLS certificate and chain common names to verify the remote server. Only System keychain is searched for certificates

Download Server Public Certificate(s)

# The resulting file may have more than one certificate. Keychain Access will 
# automatically parse them into separate cert entries when you 
# double-click or drag-drop the file this command generates
echo -n | openssl s_client -showcerts -connect HOSTNAME:PORT | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/Downloads/server-public-cert.pem


Example TLS Preferences

<!-- Remote endpoint logging master switch -->
<key>LogRemoteEndpointEnabled</key>
<true/>
<!-- Start TLS Configs -->
<key>LogRemoteEndpointType</key>
<string>TLS</string>
<key>LogRemoteEndpointURL</key>
<string>tls://server.company.com:4477</string>
<key>SyslogFormatEnabled</key>
<true/>
<key>LogRemoteEndpointTLS</key>
<dict>
  <key>TLSServerCertificate</key>
  <array>
    <string>server_name.company.com</string>
    <string>Let's Encrypt Authority X3</string>
    <string>DST Root CA X3</string>
  </array>
</dict>
<!-- End TLS Configs -->



Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.