Set Up External Syslog for Web Application Firewall

The following article provides instructions on how customers can forward Alert Logic® web application firewall (WAF) logs to an external logging source.

Solution

1. Alert Logic Web Security Manager customers - in the Alert Logic console, click Configuration > WAF > Appliances.
   
   Alert Logic Essentials, Professional, or Enterprise customers - open the navigation menu () and select Configure > WAF > Appliances.
   
   
2. In the side panel, click Appliances.
   
   
3. To the far right of the applicable appliance, click Manage Appliances.
   
   
4. In the left-hand menu of the window that appears, under System, click Configuration.
   
   
5. Under Logging to external host, click the Enable logging to external syslog.
   
   
6. Input the IP address of your central syslog device in the Syslog server text field.
   
   
7. Indicate the level of logging you would like from the Threshold drop-down menu.
   
   
8. Click Save settings.