topic Re: Ironport Syslog functionality in Web Security

Ironport Syslog functionality

Ronald Nutter — Thu, 26 May 2011 16:19:23 GMT

I am trying to get our Ironports (3) to report to our central syslog server. I dont see any support in the GUI or CLI.

Is this possible and if so how ?

Re: Ironport Syslog functionality

edadios — Fri, 27 May 2011 01:18:20 GMT

From Web GUI

System Administration-------Log Subscription-----System Logs (name of the log)------ Syslog Push

Enter Following:

1. Hostname: Syslog server name or IP address

2. Protocol default uses UDP

3. Facility: Choose from the dropdown e.g. user, local, ftp, ntp ec..

Submit and commit the change.

Re: Ironport Syslog functionality

Tom Foucha — Thu, 02 Jun 2011 14:27:41 GMT

Syslog push of access logs will be in an upcoming release of AsyncOS and is only available for certain logs today.

Sent from Cisco Technical Support iPhone App

From your step 3 above, how

zain.khan — Tue, 15 Apr 2014 01:00:45 GMT

From your step 3 above, how do we know which options to choose? what does each one mean? e.g what does user or ntp or security or mail mean? How do we know which one to choose?