Syslog Export Filters

About Syslog Export Filters

Policy Manager can export session data (see Live Monitoring: Access Tracker), audit records (see Audit Viewer), and event records (see Event Viewer). You configure syslog export filters to instruct Policy Manager where to send this information and what kind of information should be sent through data filters.

Syslog Export Filters Page

To configure syslog export filters:

1. Navigate to Administration > External Servers > Syslog Export Filters. The Syslog Export Filters page opens.

Figure 1  Syslog Export Filters Page

The following table describes the Syslog Export Filters parameters:

Table 1: Syslog Export Filters Page Parameters

Parameter

Action/Description

Name

Displays the name of the syslog export filter.

Description

Displays the description of the syslog export filter.

Export Template

Displays the name of the Export Template selected in the Add Syslog Export Filter dialog (see Adding a Syslog Export Filter ).

Export Event Format

Displays the Export Event Format Type selected in the Add Syslog Export Filter dialog; for example, LEEF Log Event Extended Format. LEEF is a type of customizable syslog event format. An extended log file contains a sequence of lines containing ASCII characters terminated by either the sequence LF or CRLF. (Log Event Extended Format) and CEF Common Event Format. The CEF is a standard for the interoperability of event or log-generating devices and applications. The standard syntax for CEF includes a prefix and a variable extension formatted as key-value pairs. (Common Event Format).

Status

A red icon indicates that the syslog export filter is currently disabled. To enable a disabled filter, click the red icon.

A green icon indicates that the syslog export filter is currently enabled. To disable an enabled filter, click the green icon.

Export

To export a syslog export filter, select the check box for the appropriate filter, then click Export.

The Export to file dialog opens. For more information, see Importing and Exporting Information.

Delete

To delete a syslog export filter, select the check box for the appropriate filter, then click Delete.