Symantec Endpoint Protection Installation and Administration Guide

Portugues Chinese (Simplified) Czech Deutsch Español Français Italian Japanese Korean Polish Russian Chinese (Traditional) English

Exporting data to a Syslog server

To increase the space in the database, you can configure the management server to send the log data to a Syslog server.
When you export log data to a Syslog server, you must configure the Syslog server to receive the logs. See:
  1. To export log data to a Syslog server
  2. In the console, click
    Admin
    .
  3. Click
    Servers
    .
  4. Click the local site or remote site that you want to export log data from.
  5. Click
    Configure External Logging
    .
  6. On the
    General
     tab, in the
    Update Frequency
     list box, select how often to send the log data to the file.
  7. In the
    Master Logging Server
     list box, select the management server to send the logs to.
    If you use SQL Server and connect multiple management servers to the database, specify only one server as the Master Logging Server.
  8. Check
    Enable Transmission of Logs to a Syslog Server
    .
  9. Provide the following information:
    • Syslog Server
      Type the IP address or domain name of the Syslog server that you want to receive the log data.
    • Destination Port
      Select the protocol to use, and type the destination port that the Syslog server uses to listen for Syslog messages.
    • Log Facility
      Type the number of the log facility that you want to the Syslog configuration file to use, or use the default. Valid values range from 0 to 23.
  10. On the
    Log Filter
     tab, check which logs to export.
  11. Click
    OK
    .