Skip to content

Configure a WatchGuard firewall to forward syslogs

  1. In your WatchGuard user interface, select System > Logging. In the Syslog Server tab, check the box for Send log messages to these syslog servers, then click Add.
  2. In the Syslog server panel, specify the following details:
    • IP Address: the IP you assigned to the VM when you created it
    • Port: 514
    • Log Format: Syslog
    • check boxes to include: The times stamp and The serial number of the device
  3. Specify the syslog facility for the following types of log messages:
    • Alarm: Local0
    • Traffic: Local1
    • Event: Local2
    • Diagnostic: Level3
    • Performance: Level4
  4. Click OK to save.

Reference WatchGuard documentation for further detail.


Was this documentation helpful? Please send us your feedback!