Deep Discovery Web
Inspector maintains access and violation
detection logs that can be sent to syslog servers.
Detection Syslog Server Profiles
Deep Discovery Web
Inspector can send
violation detection logs to up to three syslog servers after saving the logs to its
database. You can add up to three detection syslog server profiles.
Only logs saved after enabling a syslog server will be sent to that server.
Previous logs are excluded.
The Default Access Syslog Server
Profile
Deep Discovery Web
Inspector can send
access logs to up to one syslog server. There is a default access syslog server profile
that
is built-in and is preconfigured with certain settings. It is disabled by default.
You can
use this profile to start sending access logs to a syslog server.
To send the access logs, you must configure the syslog server IP address and
port and then enable the profile. Additionally, you can customize which access log
entries
are sent to the syslog server.
After access logs are sent to the syslog server, Deep Discovery Web
Inspector deletes the original
data.