Syslog message filters

Syslog message filter criteria

You can direct syslog messages to an output destination according to these criteria:

• Syslog message ID number

  (This does not apply to syslog messages for security events such as connection and intrusion events.)

• Syslog message severity level

• Syslog message class (equivalent to a functional area)

  (This rule does not apply to syslog messages for security events, including connection and intrusion events.)

You can create a message list with specific criteria, which you can then specify as the output destination is set. Alternatively, you can configure the Firewall Threat Defense device to send a particular message class to each type of output destination independently of the message list.

(Message lists do not apply to syslog messages for security events such as connection and intrusion events.)