topic Re: is this possible for syslog in General Topics

is this possible for syslog

Retired Member — Tue, 18 Sep 2012 21:08:16 GMT

Hi,

We want all policies option log forward as syslog.Can we make this for all policies at one time or shoul we go to every policy option to select syslog. There are many policies.

Thanks.

Re: is this possible for syslog

mbutt — Tue, 18 Sep 2012 21:19:40 GMT

Hi,

Under Device tab--> server profiles---> syslog

you create a syslog server profile

Then you go to log forwarding option under

Objects tab--> log forwarding

Then choose that profile in the log forwarding profile for the logs you want forwarded to the syslog

This will allow you to forward the traffic logs for all the severity and if you want you can forward it for all the threat logs or the needs threat logs.

Let us know if this helps.

Thank you

mbutt

Re: is this possible for syslog

sdurga — Tue, 18 Sep 2012 21:26:35 GMT

Hi,

If you want to forward all the traffic logs then you have to apply the log forwarding profile to all the security policies, there is no other way. A quick way of doing this would be to do it via appending changes to the XML config via XML editor and then re importing the config back (its a hardway but cannot think of any better solution).

Thanks,
Sandeep T

Re: is this possible for syslog

Retired Member — Tue, 18 Sep 2012 22:52:55 GMT

Hi mbutt,

You mean when we made this setting we do not need to go to every policy and select forward and syslog from options?

Because this setting did not work for us.if you are sure we'll chek our config.

Re: is this possible for syslog

Retired Member — Tue, 18 Sep 2012 22:53:51 GMT

Hi Sandeep,

Yes this is what I want.I think this answer looks true.if no other way.Thank you so much.