Graylog central syslog — close-out (2026-06-26)¶
Final sender for Pattern E central syslog: HAOS (VM 200, poopcastle).
Done¶
| Item | Notes |
|---|---|
| HAOS syslog add-on | mib1185/ha-addon-syslog → 192.168.6.197:514 UDP |
| Owner verification | Logs visible in Graylog UI |
| Runbook | central-syslog-graylog.md — Phase D complete |
| Inventory | inventory/appliances/haos.yaml lifecycle note |
Sender roster (complete)¶
UDM SE, UniFi switches/APs, Proxmox, harbor-registry, pulse, octoprint, Whrrr DSM, HAOS.
Managed Linux (infra-services, saltierpoop, prox auth) stays on Wazuh + Loki — not duplicated in Graylog.
Optional follow-ups¶
- Graylog streams/extractors — owner TODO (2026-06-26)