# Cisco Ironport

## CISCO IRONPORT 

To configure IronPort device to send syslog events, please follow the following steps: 

* Log in to Cisco IronPort user interface. 
* Select System Administration \ Log Subscriptions. 
* Click Add Log Subscription. 
* Configure the following values: 
* Log Type - Define a log subscription for both Ironport Text Mail Logs and System Logs. 
* Log Name - Type a log name. 
* File Name - Use the default configuration value. 
* Maximum File Size - Use the default configuration value. 
* Log Level - Select Information (Default). 
* Retrieval Method - Select Syslog Push. 
* Hostname - Type the IP address of Log Collector. 
* Protocol - Select UDP. 
* Facility - Use the default configuration value. This value depends on the configured Log Type. 
* Save the subscription.