Removing A Log Host; Reordering Log Hosts; Synchronizing Log Hosts - Watchguard Firebox X1000 User Manual

Chapter 12: Setting Up Logging and Notification
2
Click the host name. Click Edit.
3 Type in the new log encryption key. Click OK.
You must use the same log encryption key for both the Firebox
and the WatchGuard Security Event Processor. To change the log
encryption key on the WSEP application, see "Setting the log
encryption key" on page 211.

Removing a log host

Remove a log host when you no longer want to use it for
any logging purpose. From Policy Manager:
1
Select Setup => Logging.
The Logging Setup dialog box appears.
2
Click the host name. Click Remove.
3 Click OK.
The Logging Setup dialog box closes and removes the log host
entry from the configuration file.

Reordering log hosts

Log host priority is determined by the order in which the
hosts appear in the WatchGuard Security Event Processor
list. The host that is listed first receives log messages.
Use the Up and Down buttons to change the order of the
log hosts. From the Logging Setup dialog box:
• To move a host down, click the host name. Click
Down.
• To move a host up, click the host name. Click Up.

Synchronizing log hosts

Synchronizing log hosts involves setting the clocks of all
your log hosts to a single common time source. This keeps
logs orderly and prevents time discrepancies in the log file
if failovers occur.
The Firebox sets its clock to the current log host. If the Fire-
box and the log host times are different, the Firebox time
drifts toward the new time, which often results in a brief
interruption in the log file. Rebooting the Firebox resets the
206 WatchGuard Firebox System