Firepower management center and non-standard syslog ports for audit logs and Intrusion events

[mbisko]

Hi,

I'm trying to figure out how to log audit logs [System->Configuration-Audit log] and IPS policy alerts [Intrusion policy->Advanced->Syslog Alerting] to external syslog using non-standard syslog ports or more sysolog servers.

Namely in audit logs section I cannot specify more then one syslog server and cannot specify non-standard IPS port. Is there any way how to accomplish this?

Thanks for help.

Martin

[Oliver Kaiser]

This is not possible at the moment. A feature request exists for this issue (CSCvb61559). A possible workaround is listed for IPS logging.