An attempt to create and validate a log forwarder fails with the following error:
Syslog Configuration already exists
Please verify the config parameters in the Remote Syslog Server Config.
- Okta Access Gateway (OAG)
- Log Forwarder
- Syslog
The Host value (either hostname or IP address) in the log forwarder configuration must be unique for each log forwarder. This error occurs if the Host value is already used in an existing log forwarder.
If the syslog server is only accessible by one hostname or IP address, this limitation can be overcome by setting an arbitrary hostname as the Host value and adding this hostname and the IP address of the syslog server to /etc/hosts on each OAG node or in DNS so that OAG resolves it correctly.
For example, a Host value of "syslog-audit" can be used for a log forwarder with the AUDIT syslog feed, "syslog-access" for the ACCESS log forwarder, etc., and each hostname would be mapped to the same syslog server IP in /etc/hosts.
