Installing and Configuring Delinea Syslog Collector

  1. Download the delinea_syslog-1.1.0-py3-none-any.whl file.

  2. On your Linux machine, unzip the file by running the following command:

    sudo pip install delinea_syslog-1.1.0-py3-none-any.whl --target=/opt/delinea/pas/reporting_tool

  3. Run the following command:

    sudo python3 /opt/delinea/pas/reporting_tool/setup/setup.py -t abg0233.my.centrify.net -f 15 -s "all" -dep -off

    setup-delinea-syslog

    If your host sits behind a TLS-intercepting corporate proxy, supply a custom CA bundle:

    sudo python3 /opt/delinea/pas/reporting_tool/setup/setup.py -t abg0233.my.centrify.net -f 5 -s "all" -dep -off --ca-bundle /etc/pki/ca-trust/source/anchors/corporate-proxy.pem

    • -t: Specifies the Delinea Cloud Suite tenant hostname (for example, abg0233.my.centrify.net). If you omit the URL scheme, https:// is prepended automatically.
    • -f: Defines the frequency, in minutes, of the syslog fetch query. Must be greater than 5 and less than 60. The value is written to the generated config file.
    • -s: Sets the scope of the enrolled Delinea Cloud Suite agent (for example, "all" to include every scope on the host).
    • -dep: Installs the writer's Python dependencies (centrify.dmc, requests, cachetools). Online by default; combine with -off to install from the bundled packages instead.
    • -off: Installs dependencies from the wheel files bundled with this package. Use together with -dep.
    • -p (optional): Specifies the proxy host and port the writer should use at runtime (for example, 127.0.0.1:8080).
    • --ca-bundle (optional): Absolute path to a CA bundle file used to verify the tenant's TLS certificate. Use this when the host's default trust store does not include the tenant certificate's issuer (for example, behind a TLS-intercepting proxy or with an internal CA). Setup aborts if the path is relative or does not exist; omit the flag to use the system trust store.

  4. Run the following command:

    sudo python3 /opt/delinea/pas/reporting_tool/delinea_syslog/delinea_syslog_writer.py

  5. Access the second terminal session and run the following command to check the logs, and to look for the delinea_syslog_writer:

    sudo tail -f cat /var/log/messages

If you find TLS certificate verification failures, see Troubleshooting TLS Verification.

The setup is now completed, and the delinea_syslog_writer starts sending data from your Delinea Cloud Suite tenant to your Delinea syslog.