Comment on page
Collect Unifi syslogs with Kawa
Send your Unifi console logs to RunReveal using the Kawad service
Utilizing Kawa you can collect and view all of your Unifi device syslogs. In this guide we will walk you through creating your Kawa source in RunReveal, setting up Kawa on a machine, and forwarding your Unifi syslogs to the Kawa service.
First you will need to setup your Kawa source in RunReveal. Log into your account and create a new source, giving it a memorable name.
Once created save the webhook url that is created this will be needed to forward Kawa logs to RunReveal.
Next, download a Kawa release for the operating system and architecture of the host you'll be running the daemon on from the releases page (https://github.com/runreveal/kawa/releases/latest ). Extract the package to a directory of your choosing.
Setup your config file to use with Kawa, below is an example of what is needed to forward your syslogs to RunReveal. Replace
{{YOUR-KAWA-WEBHOOKURL}} with the webhook URL that you saved when creating your RunReveal source. rrtype is a tag that can be used to help identify the different kawa logs in your RunReveal account. This is optional and can be omitted if necessary.config.json
{
"sources": [
{
"type": "syslog",
"addr": "0.0.0.0:5514",
"contentType": "application/text; rrtype=unifi"
}
],
"destinations": [
{
"type": "runreveal",
"webhookURL": "{{YOUR-KAWA-WEBHOOKURL}}",
},
}
We can run Kawa pointing at the configuration like so (assuming the config is in the same directory as the binary).
./kawa run --config=./config.json
With Kawa running, it's time to tell Unifi where to send logs. You will want to access your Unifi network console and access the advanced system settings.
Scrolling to the bottom you will find a Remote Logging Location section. Select the remote server and check syslog. From here you will enter the host that is running Kawa and the port that the syslog source is using (in our example above we used 5514).
Apply your changes and Unifi will begin forwarding your device syslogs to Kawa. Once Kawa receives the logs it will send them to your RunReveal Kawa source.
Last modified 2mo ago