Make sure you have configured a syslog server with an IP address that will be reachable to the respective Sensors.
By configuring settings in this page, you will be able to enable syslog forwarding for the Sensor. Unless you inherit settings from the domain, any configuration in this page will override settings defined at the domain level.
Select Devices → <Admin Domain Name> → Devices → <Device Name> → Setup → Logging → IPS Event Logging.
If you want to use settings configured for the domain, select the Inherit Settings checkbox.
Click Save to complete the configuration. However, if you want to configure settings at the domain level, see Enable syslog forwarding for alert notifications at the domain level.
After you complete configuring these settings, syslog forwarding for the Sensor is enabled.