> For the complete documentation index, see [llms.txt](https://docs.blusapphire.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.blusapphire.io/log-forwarding/03_log-forwarding-guide/log-forward/cisco/cisco-ironport.md).

# Cisco Ironport

## CISCO IRONPORT 

To configure IronPort device to send syslog events, please follow the following steps: 

* Log in to Cisco IronPort user interface. 
* Select System Administration \ Log Subscriptions. 
* Click Add Log Subscription. 
* Configure the following values: 
* Log Type - Define a log subscription for both Ironport Text Mail Logs and System Logs. 
* Log Name - Type a log name. 
* File Name - Use the default configuration value. 
* Maximum File Size - Use the default configuration value. 
* Log Level - Select Information (Default). 
* Retrieval Method - Select Syslog Push. 
* Hostname - Type the IP address of Log Collector. 
* Protocol - Select UDP. 
* Facility - Use the default configuration value. This value depends on the configured Log Type. 
* Save the subscription.