configurable syslog logger protocol (#149)

redcanaryco · Aug 9, 2023 · 8205472 · 8205472
1 parent 41ea52a
commit 8205472
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/Public/Syslog-ExecutionLogger.psm1 b/Public/Syslog-ExecutionLogger.psm1
@@ -26,7 +26,7 @@ function Write-ExecutionLog($startTime, $stopTime, $technique, $testNum, $testNa
     # send syslog message if a syslog server is defined in Public/config.ps1
     if ([bool]$artConfig.syslogServer -and [bool]$artConfig.syslogPort) {
         $jsonMsg = $msg | ConvertTo-Json
-        Send-SyslogMessage -Server $artConfig.syslogServer -Port $artConfig.syslogPort -Message $jsonMsg -Severity "Informational" -Facility "daemon"
+        Send-SyslogMessage -Server $artConfig.syslogServer -Port $artConfig.syslogPort -Message $jsonMsg -Severity "Informational" -Facility "daemon" -Transport $artConfig.syslogProtocol
     }
 }
 

diff --git a/Public/config.ps1 b/Public/config.ps1
@@ -30,6 +30,7 @@ $artConfig = [PSCustomObject]@{
   # [optional] Syslog configuration, default execution logs will be sent to this server:port
   syslogServer               = '' # set to empty string '' if you don't want to log atomic execution details to a syslog server (don't includle http(s):\\)
   syslogPort                 = 514
+  syslogProtocol             = 'UDP' # options are UDP, TCP, TCPwithTLS
 
   verbose                    = $true; # set to true for more log output