How to configure Syslog on Sophos XG

These instructions assume:

• The date, time and time zone are correctly set on the device.
• You have administrative access to the firewall.
• The IP address of your Auvik collector is known. You can find this in the Syslog > Summary tab in the Export Information column.

Configure Syslog:

1. Log into the web admin console
2. Go to System services
3. Click on Log settings
4. Click on Add to specify the settings:

• • On IP address specify the IP address of the Auvik collector machine.
  • On Port, add 514.
  • On Facility select the DAEMON option.
  • On Severity Level specify Debug.
  • On Format select “Device Standard Format” option.
  • Click Save.

For more information:

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/tasks/SyslogServerAdd.html