Cisco Ironport

CISCO IRONPORT

To configure IronPort device to send syslog events, please follow the following steps:

• Log in to Cisco IronPort user interface.

• Select System Administration \ Log Subscriptions.

• Click Add Log Subscription.

• Configure the following values:

• Log Type - Define a log subscription for both Ironport Text Mail Logs and System Logs.

• Log Name - Type a log name.

• File Name - Use the default configuration value.

• Maximum File Size - Use the default configuration value.

• Log Level - Select Information (Default).

• Retrieval Method - Select Syslog Push.

• Hostname - Type the IP address of Log Collector.

• Protocol - Select UDP.

• Facility - Use the default configuration value. This value depends on the configured Log Type.

• Save the subscription.