Syslog Reporting

LinkProof can mirror event traps to a specified syslog server.

You can also define additional notification criteria such as Facility and Severity, which are expressed by numerical values. Facility indicates the type of device of the sender, while Severity indicates the importance or impact of the reported event. The user-defined Facility value is used when the device sends Syslog messages. The default value is 21, meaning Local Use 6, which is the value used by LinkProof versions previous to 3.0. The Severity value is determined dynamically by the device for each message that the device sends.

To configure sending traps to a syslog server

1.	Select Services > Syslog Reporting. The Syslog Reporting pane is displayed.

2.	Configure the parameters; and then, click Set.

 

Table 32: Syslog Reporting Parameters

Parameter	Description
Syslog Operation	Enables or disables syslog reporting. Values: enable, disable
Syslog Station Address	The IP address of device running the syslog service (syslogd). Default: 0.0.0.0
Syslog Station Facility	Type of device of the sender. This is sent with syslog messages. Values: • Kernel Messages • User Level Messages • Mail System • System Daemons • Authorization Messages • Syslogd Messages • Line Printer Subsystem • Network News Subsystem • UUCP • Clock Daemon • Security messages • FTP Daemon • NTP Daemon • Log Audit • Log Alert • Clock Daemon2 • Local Use 0 • Local Use 1 • Local Use 2 • Local Use 3 • Local Use 4 • Local Use 5 • Local Use 6 • Local Use 7 Default: Local Use 6
Syslog Source Port	The syslog source port. Default: 512