TippingPoint Advanced Threat Protection for Email can send logs to up to three syslog servers after saving the logs to its database. Only logs saved after enabling a syslog server will be sent to that server. Previous logs are excluded.