log syslog-policy
Use this command to configure a connection to one or more Syslog servers. Each policy can specify connections for up to three Syslog servers. The log syslogd configuration uses the policy to define the specific Syslog server or servers on which log messages are stored. For details, see log syslogd.
To use this command, your administrator account’s access control profile must have either w or rw permission to the loggrp area. For details, see Permissions.
Syntax
config log syslog-policy
edit "<policy_name>"
config syslog-server-list
edit <entry_index>
set port <port_int>
set cus-fields <cus-fields_name>
end
next
end
| Variable | Description | Default |
|
Enter the name of a new or existing Syslog policy. The maximum length is 63 characters. The name of the report profile will be included in the report header. To display the list of existing policies, enter:
|
No default. | |
| Enter the index number of the individual entry in the table. You can create up to 3 connections. |
No default. | |
| Enable if the Syslog server requires the FortiWeb appliance to send log messages in comma-separated value (CSV) format, instead of the standard Syslog format. |
disable
|
|
|
Enter the port number on which the Syslog server listens. The valid range is 1–65,535. |
514
|
|
| Enter the IP address of the Syslog server. | No default. | |
| Enables TLS to establish a secure connection between FortiWeband the specified Syslog server for sending log data. |
|
|
|
Select one of the identifiers you have defined in |
No default. |
Example
This example creates Syslog_Policy1. The Syslog server is contacted by its IP address, 192.168.1.10. Communications occur over the standard port number for Syslog, UDP port 514. The FortiWeb appliance sends log messages to the Syslog server in CSV format.
config log syslog-policy
edit "Syslog_Policy1"
config log-server-list
edit 1
set server "192.168.1.10"
set port 514
set csv enable
end
next
end