Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to set up forwarding alerts to syslog server from Policy Manager?

Issue:

I have a syslog server, how can I forward alerts from Policy Manager Server?

Resolution:

You can set Policy Manager to forward alerts to a third-party syslog server.

Currently, both TCP and UDP transport protocols are supported.

To configure syslog alert forwarding:

  1. Select Tools > Server configuration from the menu.
  2. Click Syslog.
  3. Select Forward alerts to syslog and enter the server address.
  • By default, alerts are forwarded to syslog using UDP port number 514. If you want to use a different port, enter the port number after the server address, for example, test.com:8080.
  1. Select the message format.
  • Both Syslog (RFC 3614) and Common Event Format messages are supported.
  1. Click OK.