Configuring External Log Servers

The Logs & Monitoring > Log Servers page lets you configure external log servers for security and system logs for additional logging storage.

External Syslog Server Configuration

You can configure a gateway to send logs to multiple external syslog servers.

To configure an external syslog server:

  1. Under Syslog Servers, click Configure.

    The External Syslog Server window opens.

  2. Enter a Name and IP address.

  3. Enter a Port.

  4. Select Enable log server.

  5. Optional - Select Show Obfuscated Fields. Obfuscated packets are shown as plain text.

  6. Select logs to forward:

    • System logs

    • Security logs

    • Both system and security logs

  7. Click Apply.

To configure additional syslog servers:

Click Add Syslog Server.

You can send security logs to syslog servers. The security logs show in the syslog format, not in the security logs format.

To edit the external syslog server:

  1. Click the Edit link next to the server's IP address.

  2. Edit the necessary information.

  3. Click Apply.

Note - When more than one server is defined, the syslog servers show in a table. Select the syslog server you want to edit and click Edit.

To delete the external syslog server:

  1. Select the syslog server.

  2. Click Delete.

    The server is deleted.