Issue:
I have a syslog server, how can I forward alerts from Policy Manager Server?
Resolution:
You can set Policy Manager to forward alerts to a third-party syslog server.
Currently, both TCP and UDP transport protocols are supported.
To configure syslog alert forwarding:
- Select Tools > Server configuration from the menu.
- Click Syslog.
- Select Forward alerts to syslog and enter the server address.
- By default, alerts are forwarded to syslog using UDP port number 514. If you want to use a different port, enter the port number after the server address, for example, test.com:8080.
- Select the message format.
- Both Syslog (RFC 3614) and Common Event Format messages are supported.
- Click OK.
Article no: 000002577