Some people let it wrap but it fills up the flash with 1 meg files. I send mine to a syslog server "config/sys/events/syslog". So under config/sys/events/general since I am using "syslog" I choose "use event list" In the event list I have define these values which show what you are looking for.
AUTH/22, SEV(4)
AUTH/28, SEV(4)
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.