Configure Syslog Server Support
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Configure Syslog Server Support
Syslog server support configuration for forwarding the Log Collector logs as syslog
messages to a syslog server.
Where Can I Use
This? | What Do I
Need? |
---|---|
|
|
Prisma SD-WAN
allows to configure the Syslog
Server Support. From release 5.6.1, you can create or attach a Syslog Profile from
the Prisma SD-WAN
web interface for forwarding the Log Collector
logs as syslog messages to a syslog server.- Select.WorkflowsDevicesClaimed Devices
- Select the ION device to export the logs to a Syslog server and clickConfigure the device.
- On the Device Configuration page, select theSyslog Export.
- ClickCreate Syslog Serverto create a new Syslog Server.
- Create a Syslog Exporter from theAdd Syslog Serverscreen.
- SelectEnable this Syslog Serverfield to enable the Syslog server.
- Enter aNamefor the Syslog server.This is a mandatory field.
- (Optional)Enter aDescriptionfor the Syslog server.
- (Optional)EnterTagsto enhance the search mechanism while querying common attributes.Tags are used for reporting purposes and can help search for Syslog exporters with certain common attributes. For example, you can use the UDP_EXPORTER tag to search for Syslog exporters using UDP Protocol.
- SelectUse Syslog Profileto choose an existing syslog profile from the list.
- (Optional)Enter aSource Interfacefor the Syslog server.You can now select the associated VRF interface (global or custom).If no value is entered for this field, then the controller port is considered as the default source interface.A bypass pair cannot be considered as a source interface.
- Select a syslog profile from theSyslog Profilelist.
- SelectCustom Configurationto override all the created syslog profiles.You can either chooseUse Syslog ProfileorCustom Configuration. Selecting one of them is mandatory.ThePrefill values from a preset Syslog Profile?allows to create or choosing a profile to prefill values from the existing syslog profile list and make changes if required.
- SelectEnable Flow Loggingto export flow logs to the Syslog server.
- Select theSeverity Levelfrom a severity level ofcritical,major, orminor.When a severity level is set for a device, logs and events for the selected severity level and a higher level are exported to the Syslog profile.
- Select the protocol type asTCP, orUDP, orTLSfor theProtocolfield.The default protocol is UDP.If you select TLS as the protocol type, theImport Certificateoption is enabled. ClickImport Certificateto upload the certificate.ClickView Certificateto view the selected certificate andClearto remove the certificate.Beginning with Release 6.2.1, ION devices utilize OpenSSL 1.1.1g. As a result, certificates generated using older OpenSSL versions (1.0.x) may not work due to deprecated or unsupported algorithms. To ensure successful TLS connections with ION devices, it is recommended to use newer software stacks such as OpenSSL 1.1.1, Ubuntu 18.x, or certtool from the GnuTLS package on Syslog collector machines.Note that ION devices will no longer support OpenSSL 1.0.x as of Release 6.2.1.
- Syslog connection fails if Self Signed certificate is uploaded.
- If the FQDN server selects as a server, FQDN should match the subject alternate name (SAN) in the peer certificate.
- Prisma SD-WANsupports only TLS version 1.2.
- If you selectServer IP, enter the Syslog Server IP address. Or, if you chooseServer FQDN(fully qualified domain name), enter the Syslog Server FQDN domain name.This field is mandatory. You must provide either a Server IP address or an Server FQDN address.
- Enter the Syslog Server port number in theServer Portfield.The default port is 514 for TCP or UDP and 6514 for TLS.
- ClickSaveto save the Syslog export configuration.