Forwarding Logs To A Syslog Server - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

ProCurve Secure Router OS Firewall—Protecting the Internal, Trusted Network

Forwarding Logs to a Syslog Server

Syslog servers collect information about devices on a network. You can then
analyze this information for a picture of network functions as a whole. The
ProCurve Secure Router can log events to a syslog server. (See Figure 4-7.)
Syslog
server
local2
Log
Figure 4-7. Forwarding Logs to a Syslog Server
To configure log forwarding to a syslog server, you must:
1. Enable log forwarding. From the global configuration mode context,
enter:
ProCurve(config)# logging forwarding on
2. Specify the IP address of the syslog server:
Syntax: logging forwarding receiver-ip <A.B.C.D>
For example:
ProCurve(config)# logging forwarding receiver-ip 172.16.62.99
3. Configure the syslog facility type:
Syntax: logging facility <facility keyword>
The default setting is kern.
Originally, the syslog facility was used to identify which part of a UNIX
system originated a particular message. This system does not define a
router as such, but the local0 to local7 facilities are typically reserved for
messages from remote devices. The ProCurve Secure Router can set its
message facility type to any of those shown in Table 4-4. You should select
the facility used by routers in your network.
For example, the syslog server in Figure 4-7 is configured to receive logs
from the router on facility local2. You would enter:
ProCurve(config)# logging facility local2
Router
Failed connection
Configuring Logging
4-27