I realize that graylog is better designed for very large syslog flows, but I believe I am looking at more of a " moderate" use case. Hopefully this idea helps someone else that stumbles across it. Greetings, I mentioned this on discord a few weeks ago. Not sure if I'll keep this running, but it does seem to work if you've got a vlan capable switch on the other side of your 3rd party router.Īnyway, sorry to resurrect a 4 year old thread. I guess you could statically set an IP on the same subnet as the BGW, remove the gateway and DNS servers and only allow inbound port 514 on the second virtual NIC to keep the machine from sending traffic out that interface. Windows picked up DHCP from the BGW210 on the new NIC and Wireshark showed Syslog messages coming in on port 514.

In ESXI I added the vlan to the vswitch and added a NIC on that vlan to a test Windows box. I plugged a cable from one of the BGW LAN ports into this new port on the 3750 and added the ATT-Outside vlan to the trunk going to my Esxi box. I added a new 'ATT-Outside' vlan to my 3750 switch with no SVI and put the vlan on a single access port on the switch. I'm sure you've long since figured it out or moved on, but if I find a solution I'll come back and share it here for the sake of anyone else trying to slough through the quagmire of nonsense engendered by this atrocious, MANDITORY gateway interface.ĪT&T, if you're listening (which I doubt), here's my feedback, and I think I speak for your broadband customers across the country: if you want happier internet customers, and to not be the laughingstock of the ISP world, unlock your router firmware! Or at least dial back the security enough to give the more tech-savvy customers SOME degree of end-user customization on these devices we are paying for. It's bad enough that I have to deal with 1.5 megabit internet, why do I have to suffer through this garbage webpage as Hacky workaround incoming: I was just looking at setting up syslog from the BGW210 to a linux VM running Librenms. Well, the syslog part, not the honeypot (not a bad idea though) Sorry my friend, but it's 4 years later and I just got one of these routers myself and have the same question. Wow, I just love how supportive and knowledgeable the AT&T staff and community are! Just look at all the answers to this question, this thread really speaks for itself.

Librenms Syslog