Configuring Syslog Collection (NSM Procedure)

You configure syslog settings if you want to forward a copy of IDP logs to a syslog server.

You have the option of configuring NSM to forward a copy of its log collection to a syslog server or configuring syslog settings for each IDP device.

To have all IDP logs sent to a Syslog server, select the check box and specify the syslog server IP address. Then load the new configuration onto the sensor.

To configure syslog forwarding for NSM, see the NSM online Help.

To configure syslog forwarding for a single IDP device:

  1. In the NSM Device Manager, double-click the IDP device to display the device configuration editor.
  2. Click Report Settings.
  3. Select Enable Syslog.
  4. Enter the syslog server IP address in Syslog Server IP.
  5. Set the syslog server port in Syslog Server Port. Port 514 is the industry standard and is used as the default.
  6. Select the protocol in Protocol. UDP is the industry standard and is used as the default.
  7. Specify whether to forward packet logs to the syslog server.
  8. Click OK.

Related Documentation