About Logging To A Watchguard Log Server; Send Your Event Logs To The Log Server - Watchguard Firebox X15 User Manual

About logging to a WatchGuard Log Server

The WatchGuard Log Server (previously known as the WatchGuard System Event Processor, or WSEP) is a
component of WatchGuard System Manager. If you have a Firebox III, Firebox X Core, or Firebox X Peak,
configure a primary Log Server to collect the log messages from your Firebox X Edge e-Series. You can also
configure a backup Log Server. If the Firebox X Edge cannot connect to the primary Log Server, it tries to
connect to the backup Log Server. It then sends log messages to the backup Server until it cannot connect to
that Server. Then, it tries the primary Server again. For instructions on how to configure the Log Server to
accept log messages, see the WatchGuard System Manager User Guide.
If you have not already done so, it is a good idea to configure the Edge with a device name. This name lets the
Log Server know which log messages come from which device. The device name appears in the Log Viewer.
If this field is clear, the Firebox X Edge is identified in the log file by the IP address of the Edge external
interface. To give your Edge a device name, go to the Administration web page.

Send your event logs to the Log Server

To configure the Edge to send your event logs to a WatchGuard Log Server:
1. To connect to the System Status page, type
of the Firebox X Edge trusted interface. The default URL is: https://192.168.111.1
2. From the navigation bar, select Logging > WatchGuard Logging.
The WatchGuard Logging page appears.
3. Select the Send logs to WSM Log Server check box if you want the Edge to send log messages to a
WatchGuard Log Server you specify.
User Guide
in the browser address bar, and the IP address
https://
Logging
179