Managing logs in Ubiquiti UniFi networks is essential for troubleshooting, compliance, and security monitoring. By forwarding syslogs to a dedicated solution like LogCentral, you gain centralized visibility across your entire infrastructure. In this guide, we’ll walk you through setting up a syslog server for UniFi and configuring your UniFi controller to send logs to it.
🔧 Why Use a Syslog Server with UniFi?
UniFi devices generate valuable logs that can help detect network anomalies, security events, and system errors. However, logs stored locally on the controller or access points are limited. By sending them to a centralized syslog server:
- You get long-term storage of logs.
- You can search and analyze events across multiple UniFi sites.
- You improve compliance and auditing with a permanent log trail.
- You integrate UniFi with monitoring tools like LogCentral.
⚙️ Step 1: Prepare Your Syslog Server
First, you need a syslog server. You can deploy one using tools like syslog-ng, rsyslog, or a cloud-based solution such as LogCentral. Make sure the server listens on the correct ports (default: UDP 514, TCP 514, or custom ports you define).
⚙️ Step 2: Configure UniFi Controller to Forward Syslogs
Open your UniFi Network Controller (or UniFi OS Console) and follow these steps:
- Log into your UniFi Controller.
- Go to Settings → System.
- Scroll to Integrations → SIEM Server.
- Pick the log categories you want to forward
- Enter the IP address (or hostname) of your syslog server.
- Specify the port (default 514 or custom).
- Save your settings.
From this point, UniFi will automatically forward device logs to your syslog server. You can verify reception by checking the syslog files or using tcpdump to capture incoming traffic.
📊 Viewing Logs in LogCentral
If you’re using LogCentral, your logs are immediately stored in the cloud, searchable with filters, and retained for as long as your plan allows. This enables faster troubleshooting, alerting, and correlation across multiple UniFi sites.
✅ Conclusion
Setting up a syslog server for UniFi networks only takes a few minutes but provides huge benefits in terms of visibility, troubleshooting, and compliance. Whether you’re running a single site or managing dozens of UniFi deployments, centralizing logs with a service like LogCentral makes your network more reliable and secure.