hmLoadTopic({
hmKeywords:"Export logs to Syslog",
hmTitle:"Export logs to Syslog",
hmDescription:"ESET PROTECT On-Prem can export certain logs\/events and send them to your Syslog server. Events from the following log categories are being exported to Syslog server:...",
hmPrevLink:"automatically_pair_found_computers.html",
hmNextLink:"admin_server_settings_syslog.html",
hmParentLink:"admin.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; <a href=\"admin.html\">More<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > More > Export logs to Syslog",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Export logs to Syslog<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">ESET PROTECT On-Prem can export certain logs\/events and send them to your <a href=\"admin_server_settings_syslog.html\" class=\"topiclink\">Syslog server<\/a>. Events from the following log categories are being exported to Syslog server: Detection, Firewall, HIPS, Audit and ESET Inspect. Events are generated on any managed client computer running an ESET application (for example, ESET Endpoint Security). These events can be processed by any Security Information and Event Management (SIEM) solution capable of importing events from a Syslog server. Events are written to the Syslog server by ESET PROTECT On-Prem.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>To enable <a href=\"admin_server_settings_syslog.html\" class=\"topiclink\">Syslog server<\/a>, click <span class=\"f_UI\">More<\/span> &gt; <span class=\"f_UI\">Settings<\/span> &gt; <span class=\"f_UI\">Advanced Settings<\/span> &gt; <span class=\"f_UI\">Syslog server<\/span> &gt; <span class=\"f_UI\">Use Syslog server<\/span>.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>To enable exporting, click <span class=\"f_UI\">More<\/span> &gt; <span class=\"f_UI\">Settings<\/span> &gt; <span class=\"f_UI\">Advanced Settings<\/span> &gt; <span class=\"f_UI\">Logging<\/span> &gt; <span class=\"f_UI\">Export logs to Syslog<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">All exported logs are available to Syslog users without limitations. All audit log messages are exported to Syslog.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>Choose one of the following formats for event messages:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"events-exported-to-json-format.html\" class=\"topiclink\">JSON<\/a> (JavaScript Object Notation)<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"events-exported-to-leef-format.html\" class=\"topiclink\">LEEF<\/a> (Log Event Extended Format)—format used by IBM\'s application QRadar.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><a href=\"events_exported_to_cef_format.html\" class=\"topiclink\">CEF<\/a> (Common Event Format)<\/p>\n\r<p class=\"p_Normal\">To filter the event logs sent to Syslog, <a href=\"admin_notif_events_on.html\" class=\"topiclink\">create a log category notification<\/a> with a defined filter.<\/p>\n\r"
})
