07-21-2020 02:47 AM
Solved! Go to Solution.
07-21-2020 08:49 PM
Can you show us your access control policy where you have specified the new syslog setting to be used? Unless you have such a policy setting, the setting will continue to show as "not used".
07-21-2020 04:29 AM
Can you post the screenshot how you confgured :
or refer below document :
07-21-2020 04:58 AM
07-21-2020 08:06 PM
Hi Balaji and all,
I created the Syslog setting and the it was saved successfully. Attach is the picture for two Syslog. One of them is
"In Use" and another newly created one is "Not Used"
May I know how to make the Not Used one to In Use?
thanks and hope to hear from you soon.
regards,
tangsuan
07-21-2020 08:49 PM
Can you show us your access control policy where you have specified the new syslog setting to be used? Unless you have such a policy setting, the setting will continue to show as "not used".
07-22-2020 12:22 AM
Hi Mervin,
Thanks to your suggestion. I find the access control policy and in the logging tab, I added in the new Syslog setting and now it becomes In Use.
Thanks to your solution to resolve my problem.
One more question now it is In Use. What is the effective way to show that the Syslog server actually got the logs from this IPS or FMC. Is the Tag at the Syslog setting can indicate some clue on the result?
Thanks!
regrads,
tangsuan
07-22-2020 12:52 AM
Syslog messages are normally sent via UDP so there's not guaranteed delivery. But if you see them coming into your syslog server at a regular rate then you can infer that you are getting them as they are sent.
07-22-2020 12:49 AM
You have to use in the Policy for the syslog you have created, ACP you have Logging option tab to look.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide