Siemens Reyrolle 7SR5 Operating Manual page 143

IEC 62443, and the BDEW White Paper. Logging is started centrally on 1 or 2 self-selected syslog servers.
Combining different protocol data of the devices used gives you a general overview of the device network.
You can analyze and monitor this data. This action allows safety-critical events to be logged and related
changes to be tracked. You can also track attacks on the operated devices by using the log data.
You can view the collected log data in the security log locally on the device display, irrespective of the current
operating mode of the device. The alarm and safety-critical indications are stored chronologically in the
security log. You cannot modify or delete these entries.
You can, for example, answer to the following questions:
•
How many login attempts have been made?
•
When was the device configuration last updated?
Configuring the Central Syslog Server
If you have started Reydisp Manager and have the device configuration, select Ethernet Interface in the
device Task tools. The Syslog menu item contains the setting options for a central syslog server. You can acti-
vate up to 2 syslog servers.
You can activate logging under syslog server 1 and/or 2. Enter the following data:
•
IP Address
•
Server UDP port
Reyrolle 7SR5, Operating, Manual
C53000-B7040-C013-1, Edition 05.2021
Security Settings
9.9 Recording of Cyber-Security Events
143