1) Add a new Remote Log Target
System Administration > Configuration > Log Configuration > Remote Log Targets
Press "Add" and enter the details of the remote server
2) Select the categories of messages you want to be sent to this server
System Administration > Configuration > Log Configuration > Logging Categories > Global
Can select a category and then go to the Remote Syslog targets tab and select the new server you defined above if you want it to receive messages of this type
The confguration is hierarchical so if you define a target for "AAA Audit" it will apply to both "Failed Attempts" and "Passed Authentications"
Note these configruations are global (apply equally to all servers in the deployment) or can be done per instance and can have different settings on a per server basis
