How to configure syslog on SonicWall firewalls

These instructions assume:

• The device is on version 6.5 or higher.
• The date, time and time zone are correctly set on the device.
• You have administrative access to the firewall.
• The IP address of your Auvik collector is known. You can find this in the Syslog > Summary tab in the Export Information column.

Configure syslog

1. Log into the SonicWALL web admin console.
2. Click Manage
3. Click Log Settings to expand the menu.
4. Click SYSLOG.
5. In the Syslog Servers section, click Add.
6. I the Add Syslog Server window:
1. On Name or IP Address, select “Create New Address Object” and create an object for the Auvik collector IP. 
1. Name: A recognizable name such as “Auvik Collector”
2. Zone Assignment: Typically X1, zone representing the network the Auvik collector is in. 
3. Type: Host
4. IP Address: Enter the Auvik collector IP address
5. Click OK.
2. On Name or IP address, select the newly created object.
3. Set Port to 514.
4. Leave the remaining options as default.
5. Click OK.
7. Click Accept. 

A reboot of the SonicWall device may be required for the new settings to take effect.

For more information:
https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-a-syslog-server-on-a-sonicwall-firewall/170505984096810/