Create or edit syslog notification settings

Procedure

1. Go to Admin → Server Properties, and then select the Syslog tab.
2. Under Remote Syslog for Events, click New to set up the sending of events to a syslog server, or select an existing configuration and click Edit.
3. Select Enable to turn on this feature.
4. Enter the host name or IP address in the Syslog Server field.
5. Select a transportation Protocol:
   • UDP
   • TCP
   • Encrypted TCP, and import or select the x509 certificate that is generated on the syslog server.

   Note When URI information that includes URI strings is sent using the UDP protocol, data loss can result. When logging URI string information, use either the TCP or Encrypted TCP protocol.

6. Enter the Port number (for the listener port on the syslog server).
7. Select a Log Type format. Learn more.
8. Select an Event Query to send all events or a select set of events to the syslog server.
9. Select a Facility option to limit the events sent to a specific facility level. Facilities are defined by the BSD Syslog Protocol. Refer to RFC 3164. The default setting is Security/Authorization.
10. Specify the Severity of the syslog messages sent to this server.
11. Select a Delimiter to determine the character the SMS uses as a delimiter for event data in the syslog message. The default setting is TAB.
12. Select a Timestamp in Header option:
    • None
    • SMS current timestamp – when the SMS sends the message to the syslog server.
    • Event timestamp – original timestamp of the event.
13. Select Include SMS Hostname in Header to include the hostname of the SMS.
14. Select Send New Events/Log Only to determine whether the SMS will send only new events and log entries, not those already received by the SMS. Select this when you initially configure the connection to a syslog server to exclude what could be a sizable number of historical events.
15. Click OK.
16. Under Remote Syslog for Events, click Apply.