Configure remote syslog logging for a WatchGuard Firewall

Configure remote syslog logging for a WatchGuard Firewall

This article describes the steps required to configure a WatchGuard firewall to send Syslog messages to the RocketAgent Syslog Server

To Configure the FireBox to send Syslog messages to the RocketAgent Syslog Server

  1. Select System > Logging.
  2. Click the Syslog Server tab.
  3. Select the Send log messages to these Syslog servers check box.
  4. Click Add.

    watchguard_syslog_server.jpg
  5. In the IP Address text box, type the IP address of the RocketAgent Syslog Server.
  6. In the Port text box, the default Syslog server port (514) appears. Leave the default unless you have configured the RocketAgent to a different port. 
  7. From the Log Format drop-down list, select Syslog.
The details you can include in the log messages depend on the log format you select.
​
  1. In the Description text box, type RocketAgent.
  2. Select The timestamp check box.
  3. Select The serial number of the device check box.
  4. In the Syslog Settings section, for each type of log message, select a Syslog facility from the drop-down list.
    • For high-priority Syslog messages, such as alarms, select Local0.
    • To assign priorities for other types of log messages (lower numbers have greater priority), select Local1 – Local7.
    • To not send details for a message type, select NONE.
  5. Click Save.

    • Related Articles

    • Configure syslog remote logging for a SonicWall firewall

      This article provides instruction on how to set up and enable Syslog forwarding on a SonicWall firewall. Logon to the firewall as admin. Navigate to Manage | Log Settings | SYSLOG Click on the Add button Select the Name or IP address of the Syslog ...

    • Configure syslog remote logging for a Sophos firewall

      This article provides instruction on how to set up and enable Syslog forwarding on a Sophos firewall Configure Syslog Server Navigate to System Services > Log Settings and click Add to configure a Syslog server. Enter a Name for the Syslog server. ...

    • Configure remote syslog logging for a Fortinet Firewall

      This article describes the steps to configure Fortinet Firewalls to send syslog data to the RocketCyber Firewall Analyzer Configure your FortiGate firewall settings Configure the FortiGate firewall settings for your specific FortiOS operating system. ...

    • Configure syslog remote logging for a Ubiquiti Unifi Security Gateway (USG)

      This article will walk through the steps required to send Syslog data from a Ubiquiti USG device to the RocketCyber Firewall Analyzer Enable Remote Logging 1. Log in to the Unifi Network Controller and click on Settings (gear icon) at the bottom of ...

    • Configure remote syslog forwarding for Palo Alto firewalls

      This article will describe the steps required to configure Palo Alto to send Syslog messages to the RocketAgent Syslog Server Create Syslog Profile Open your Palo Alto dashboard. Navigate to Devices > Server Profiles > Syslog Click Add and enter a ...