Configuring audit log action (Server)1. Navigate to Configuration > System > Auditing > Syslog.2. Select Servers tab.3. Click Add.4. In the Create Auditing Server page, populate the relevant fields, and click Create.
NOTE: Configure Server IP (Graylog Server), Server Port, Transport Protocol (UDP/TCP)
Configuring audit log policy6. To add the policy, select the Policies tab, and click Add.7. In the Create Auditing Syslog Policy page, populate the relevant fields, and click Create.Binding audit log policy8. Navigate to Configuration > System > Auditing > Syslog.9. Select Advanced Policy Global Bindings from the drop-down list.10. Select the policy name and click Select.11. From the drop-down list, select the bind point as SYSTEM_GLOBAL and click Bind, and then click Done.
Was this article helpfu?
Thank you for voting
You are related to multiple companies. Please select the company you wish to login as.