GitHub Enterprise uses syslog-ng to forward system and application logs to the server you specify in the Management Console settings.

Any log collection system that supports syslog-style log streams is supported (e.g., Logstash and Splunk).

Enabling log forwarding

  1. On the Management Console settings page, in the left sidebar, click Monitoring.
  2. Select Enable log forwarding.
  3. In the Server address field, type the address of the server to which you want to forward logs.
  4. In the Protocol drop-down menu, select the protocol to use to communicate with the log server.

Warning: If you use the TCP protocol, a misconfigured or unreachable log server may cause your GitHub Enterprise instance to become unresponsive. We recommend using UDP and testing changes in a non-production environment first.

Troubleshooting

If you run into issues with log forwarding, contact GitHub Enterprise Support and attach the output file from http(s)://[hostname]/setup/diagnostics to your email.