Syslog monitor

The Syslog monitor can intercept syslog message sent to Network Monitor from one or more syslog hosts. The monitor can be configured to receive different types of messages. More than one syslog monitor can be added to each asset to receive different combinations of messages.

• System type: All
• Category: Log

Prerequisites

• Activate syslog message collection for each gateway separately, by checking the Network Monitor > (selected gateway) > Edit > Advanced tab > Syslog server checkbox.
• View intercepted syslog messages display on the Network Monitor Tools > List syslog messages page.

Note: Only monitor specific settings are documented here. See Standard monitor settings.

Monitor specific properties

• Include string(s) - Message included if it contains one of the strings specified in this field. Separate multiple strings with a comma.
• Exclude string(s) - Message excluded if it contains one of the strings specified in this field. Separate multiple strings with a comma.