Central Syslog Configuration

Modifying regex patterns is an advanced process. Incorrectly editing any regex match patterns could negatively impact syslog messages. Please contact FireMon Support for assistance.

You can create a new or copy the default syslog configuration so that you can modify the configuration to meet your business needs.

If you have modified the individual regex (not the order) in the file on your data collector, you will need to create a new configuration, assign it to the Central Syslog Server and then associate the server to your devices.

The Default configuration cannot be edited or deleted, it can only be viewed or duplicated.

Permission Requirements

A user will need to be a member of a user group with the following minimum permissions granted:

• Administration

  • Central Syslog Servers

  • Configuration

• Module: Administration

Open the Central Syslog Configurations List

• To view a list of syslog servers, click System > Central Syslog Configurations.

Syslog configurations with a lock icon are view-only, and cannot be edited or deleted.