Skip to content
  • There are no suggestions because the search field is empty.

Configure a Destination to Receive Global Audit Logs

Configure a Destination to Receive Global Audit LogsConfigure a Destination to Receive Global Audit Logs

In Global Audit Logging, Syslog Notification Servers are the configurations that define the destinations to receive global audit logs. You need to configure a Syslog Notification Server to use Global Audit Logging. You can define a third-party syslog server or a Log Decoder as the destination to receive the audit logs.

Configure a Syslog Notification Server for a Third-Party Syslog ServerConfigure a Syslog Notification Server for a Third-Party Syslog Server

  1. Go to netwitness_adminicon_25x22.png (Admin) > System.
  2. In the options panel, select Global Notifications.

  3. Click the Servers tab.

    Note: You do not need to configure the Output tab for Global Audit Logging.

  4. From the netwitness_ic-adddrop.png drop-down menu, select Syslog.

    The Define Syslog Notification Server dialog is displayed.

    netwitness_sysns_tp_519x436.png

  5. Configure the Syslog notification server as described in the following table.

    The Max Alerts Per Minute and Max Alert Wait Queue Size fields are not used for Global Audit Logging.

  6. Click Save.

Configure a Syslog Notification Server for a Log DecoderConfigure a Syslog Notification Server for a Log Decoder

  1. Go to netwitness_adminicon_25x22.png (Admin) > System.
  2. In the options panel, select Global Notifications.

  3. Click the Servers tab.

    Note: You do not need to configure the Output tab for Global Audit Logging.

  4. From the netwitness_ic-adddrop.png drop-down menu, select Syslog.

    The Define Syslog Notification Server dialog is displayed.

    netwitness_sysns_ld_536x450.png

  5. Configure the Syslog notification server as described in the following table.

    The Max Alerts Per Minute and Max Alert Wait Queue Size fields are not used for Global Audit Logging.

  6. Click Save.

Next StepsNext Steps

Select a default Audit Logging template to use for Global Audit Logging. If necessary, you can define your own custom template. Define a Template for Global Audit Logging provides additional information.