GitHub Enterprise uses syslog-ng to forward system and application logs to the server you specify in the Management Console settings.

Any log collection system that supports syslog-style log streams is supported (e.g., Logstash and Splunk).

Enabling log forwarding

  1. On the Management Console settings page, in the left sidebar, click Monitoring.
  2. Select Enable log forwarding.
  3. In the Server address field, type the address of the server to which you want to forward logs. You can specify multiple addresses in a comma-separated list.
  4. In the Protocol drop-down menu, select the protocol to use to communicate with the log server. The protocol will apply to all specified log destinations.

Warning: If you use the TCP protocol, a misconfigured or unreachable log server may cause your GitHub Enterprise instance to become unresponsive. We recommend using UDP and testing changes in a non-production environment first.

Troubleshooting

If you run into issues with log forwarding, contact GitHub Enterprise Support and attach the output file from http(s)://[hostname]/setup/diagnostics to your email.