Dell Unity: What is the Default RFC Format Used for Syslog Forwarding

Summary: What RFC formats are available for use with Unity? Is it possible to change the RFC format?(User Correctable)

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

A message sent from Unity to the remote syslog server:

Jul 14 01:10:26 unity-71-hosts-entry CKM0018350xxxx-upd_spb@CKM0018350xxxx Neo_CEM[2276]: "2025-07-14T01:10:26.494Z" "CKM0018350xxxx-upd_spb@CKM0018350xxxx" "Neo_CEM" "2276" "testuser" "INFO" "14:560005" :: "Authentication failed. Access denied.Username: testuser ClientIP: xx.xxx.xx.xx." :: Category=Audit Component=CASAuthentication TimeZone=UTC

The traditional log format is compliant with RFC 3164:

Jul 14 01:10:26 hostname process[pid]: message

Cause

Unity uses RFC 3164 for the log format that is sent to the remote host. This log format cannot be changed on the Unity side. Unity does not support RFC 5424.

The following document includes a statement confirming compliance with RFC3164: Dell Unity Family Unisphere Command-Line Interface User Guide
See the note on page 82 under Manage Remote Logging.

Manage remote logging


View document: Dell Unity Family Security Configuration Guide Version 5.5.1
See the note on page 26 under Manage Remote Logging.

remote logging options

Resolution

To display timestamps in a format close to RFC 5424 (RFC 3339), it is necessary to edit the /etc/rsyslog.conf file on the remote Syslog server.
 

Note: For detailed information regarding the configuration and operation of the remote Syslog server, consult the official documentation of the operating system in use.

Hint:
In order to realize the required format, it is deemed feasible to implement either the Option 1 or Option 2 template. 
Option 1: RFC5424
RSYSLOG_SyslogProtocol23Format

Option 2: RFC5424 (simple)
RSYSLOG_FileFormat

Additional Information

If the linked documents are not accessible, the manual is attached in the 'Related' tab for registered Dell Support users.

Affected Products

Dell EMC Unity
Article Properties
Article Number: 000344734
Article Type: Solution
Last Modified: 06 Aug 2025
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.