# IPS Suricata does not log into syslog

**URL:** <https://community.ipfire.org/t/ips-suricata-does-not-log-into-syslog/9302>\
**Category:** Intrusion Prevention\
**Created:** [31 January 2023 15:15 UTC](https://community.ipfire.org/t/ips-suricata-does-not-log-into-syslog/9302 "2023-01-31T15:15:43Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [31 January 2023 15:57 UTC](https://community.ipfire.org/t/ips-suricata-does-not-log-into-syslog/9302/2 "2023-01-31T15:57:00Z")

</div>

> [@florom](#):
>
> ` enabled: no =======> Cannot understand that cause the logfile is written (should not)`

That log file is not getting written to. The suricata log info is being sent to  
`/var/log/suricata/fast.log`

So the question is how to get fast.log sent to the syslog. This has been raised before and a bug has been raised for it.

[https://bugzilla.ipfire.org/show\_bug.cgi?id=12960](https://bugzilla.ipfire.org/show_bug.cgi?id=12960)

The previous thread had no suggestions for how to fix it other than my code investigation attempts.

[https://community.ipfire.org/t/ids-log-to-syslog/8777](https://community.ipfire.org/t/ids-log-to-syslog/8777)

Availability of the best core developer to support that is limited at the moment.

If there is anyone else able to figure out how to link the fast.log files to syslog within IPFire then their input would be welcomed.  
Also if anyone is willing to pick up the bug and work on it, I would encourage them to do so.

---

_[View the full topic](https://community.ipfire.org/t/ips-suricata-does-not-log-into-syslog/9302)._