To configure Syslog policies
Before you can log to Syslog, you must enable it for the log type that you want to use as a trigger. For details, see Enabling log types, packet payload retention, & resource shortage alerts.
Go to Log&Report > Log Policy > Syslog Policy.
To access this part of the web UI, your administrator’s account access profile must have Read and Write permission to items in the Log & Report category. For details, see Permissions.
Click Create New.
If the policy is new, in Policy Name, type the name of the policy as it will be referenced in the configuration.
Click Create New.
In IP Address, enter the address of the remote Syslog server.
In Port, enter the listening port number of the Syslog server. The default is 514.
Mark the Enable CSV Format check box if you want to send log messages in comma-separated value (CSV) format.
Click OK.