https://community.cisco.com/t5/network-security/send-connection-events-to-syslog-server/m-p/2962862#M1038317 <P>Lore,</P> <P></P> <P>The facility and severity is more relevant to the SYSLOG server than the configuration with FMC. &nbsp;Usually the default of LOCAL0 and severity of INFO is fine.</P> <P></P> <P>You then need to add the SYSLOG server entry you created on each access control policy to have logging set. &nbsp;Also remember to add it to the default action.</P> <P></P> <P>-Ralph</P> Tue, 04 Oct 2016 05:02:35 GMT Ralph Rye 2016-10-04T05:02:35Z https://community.cisco.com/t5/network-security/send-connection-events-to-syslog-server/m-p/2962861#M1038313 <P>Hello to everybody,</P> <P>how can I send syslog for connection events (not Intrusion events) to an external syslog server?<BR />Which facility and severity do have I set on Alerts configuration?</P> <P>Thanks in advance<BR />Lore</P> Tue, 12 Mar 2019 13:08:58 GMT https://community.cisco.com/t5/network-security/send-connection-events-to-syslog-server/m-p/2962861#M1038313 lorenzonerimail 2019-03-12T13:08:58Z https://community.cisco.com/t5/network-security/send-connection-events-to-syslog-server/m-p/2962862#M1038317 <P>Lore,</P> <P></P> <P>The facility and severity is more relevant to the SYSLOG server than the configuration with FMC. &nbsp;Usually the default of LOCAL0 and severity of INFO is fine.</P> <P></P> <P>You then need to add the SYSLOG server entry you created on each access control policy to have logging set. &nbsp;Also remember to add it to the default action.</P> <P></P> <P>-Ralph</P> Tue, 04 Oct 2016 05:02:35 GMT https://community.cisco.com/t5/network-security/send-connection-events-to-syslog-server/m-p/2962862#M1038317 Ralph Rye 2016-10-04T05:02:35Z