Configuring export of events in CEF format

You can enable the export of messages in CEF format only after configuring the syslog service to save CEF messages locally or to publish them to a SIEM system.

To configure export of events in CEF format:

1. In the application web interface window, select the Settings → Logs and events → Syslog section.
2. On the CEF format tab, turn on the Enable the CEF log format switch.
3. In the Syslog facility drop-down list, select Local2.
4. In the Event level field, configure the export detail level:
   • Error to export events that involve errors.
   • Info to export all events.

Export of events in CEF format is now configured.