Follow these steps to set the default settings for all syslog servers. These settings override any global settings on the appliance.
Alert Level
Delivery Frequency
Notification Format
Syslog Facility
For more detailed information on configuring default remote system logs, see the CLI Command Reference .
Prerequisites
You must have Admin or Operator access to the Malware Analysis appliance CLI.
Default alert level
Set the alert severity for all notifications: fenotify rsyslog default send-as <severity> command.
For example, to set all notifications at the alert severity (recommended):
hostname (config) # fenotify syslog default send-as alert
Delivery frequency
Set the delivery frequency for all notifications: fenotify rsyslog default delivery <frequency> command.
For example, to send a notification after each alert (recommended):
hostname (config) # fenotify syslog default delivery per-event
Notification format
Set the format for all notifications using the fenotify rsyslog default format <format> command.
For example, to use the CEF format:
hostname (config) # fenotify syslog default format cef
Syslog facility
Set the syslog facility value for all notifications using the fenotify rsyslog default faclity <value> command.
For example, to set the syslog facility to local 4 (recommended):
hostname (config) # fenotify syslog default facility local4