Cisco PIX 520 - PIX Firewall 520 Online Help Manual page 182

System Properties>Logging>Syslog
The Syslog panel allows you to specify the syslog servers to which the PIX Firewall will send syslog messages.
To make use of the syslog server(s) you define on this panel, you must also enable logging using the Logging
Setup panel.
The following sections are included in this Help topic:
Field Descriptions
Adding a Syslog Server
Editing a Syslog Server
Deleting a Syslog Server
Resetting to Last Applied Settings
Field Descriptions
The Syslog panel displays the following fields:
Syslog Servers table
Interface—Displays the PIX Firewall interface used to communicate with the syslog server.
IP Address—Displays the IP address of the syslog server.
Protocol/Port—Displays the protocol and port used by the syslog server.
Add—Clicking this button will open the Add Syslog Server dialog box, where you can define the
properties of a new syslog server.
Edit—Select a server from the table and click this button to open the Edit Syslog Server dialog box,
where you can edit the properties of the selected server.
Delete—Clicking this button deletes the highlighted syslog server definition.
Facility—Select a syslog facility for the host to use as a basis to file the messages. The default is
LOCAL(4)20, which is what most UNIX systems expect. However, because your network devices share
the eight available facilities, you may need to change this value for syslog.
Level—Select the level of logging messages to be sent to the syslog server. Levels are defined as follows:
Disabled (no logging)
Emergency (level 0, system unusable)
Alert (level 1, immediate action needed)
Critical (level 2, critical condition)
Error (level 3, error condition)
Warning (level 4, warning condition)