Syslog server not receiving any logs from sonicwall
Hi!
following guide, added and enabled syslog server on the same LAN:
- Installed Rapid7 collector on the windows PC (the same LAN, firewall on this PC is off)
- Added Syslog Server on the SonicWall
Event profile 0
Name or IP address (my local PC where siem collector is installed)
Server type - Syslog Server
SyslogFormat - default
Syslog Facility - Local use 0
----------------------------------------------------------------------------------------------------
but have nothing on my syslog server.…. did I miss something?
I'll try to capture the packets facility on firewall. so, what should I configure
if logs are not generating from sonicwall itself?
and Generating logs from firewall but collector is not receiving them? We have enabled the required firewall rules too.
Thanks!