Forwarding event logs to a Syslog server

Kaspersky IoT Secure Gateway can send network security event and audit logs to a Syslog server.

To configure forwarding of event logs to a Syslog server:

1. In the menu in the left part of the web interface page, select the Settings section.
2. In the Settings section, open the Utilities settings block.

   The Syslog tab opens in the Utilities settings block.

3. To enable forwarding of event logs to a Syslog server, switch on the Use syslog server to send events toggle button.
4. Configure the settings for forwarding network security event and audit logs to a recipient Syslog server. To do so, specify the following settings on the Syslog tab:
   • In the IP address and port field, enter the IP address and port of the recipient Syslog server, separating them with a colon like in the following example: 198.51.100.0:514.
   • In the Mode drop-down list, select the protocol that will be used by Kaspersky IoT Secure Gateway to send network security event and audit logs to the recipient Syslog server:
     • UDP.
     • TCP.
     • TCP/TLS.
   • If the TCP/TLS protocol is selected for forwarding logs, upload a security certificate. To do so, click the Download new certificate button and select the relevant security certificate in the opened window.
5. Click Save in the lower part of the page to save the changes.