Configuring Log Forwarding

You can forward logs from one Endpoint Security Management Server or Policy Server to a different Endpoint Security Management Server or Policy Server.

Logs from each Endpoint Security client are reported to the Endpoint Security Server (Endpoint Policy Server or Endpoint Security Management Server) that the client is connected to.

To see all collected logs together in the Logs tab of the SmartConsole Logs & Monitor view, you must configure Log Forwarding for each Endpoint Security Server in the SmartConsole.

Do this procedure for each Endpoint Security Server.

To configure Log Forwarding from one Endpoint Security Server to a different Endpoint Security Server:

1. Open SmartConsole and connect to the Endpoint Security Management Server.
2. Open the Endpoint Security Management Server object.
3. In the tree of the window that opens, select Logs > Additional Logging.
4. In the Log Forwarding Settings section, select Forward log files to Log Server and select the Endpoint Security Management Server or Policy Server.
5. Configure a Log Forwarding schedule.
6. Click OK.
7. Select Menu > Install Database and install the database on all hosts.
8. Run cprestart on the Endpoint Security Management Server.