You can configure the recording of traffic processing events and system events of the application into the operating system log over the Syslog protocol. It allows importing events into a third-party SIEM system.
Information about events is recorded in a separate category of the system log, which is specified in Syslog settings. Information about each event is sent as a separate syslog message. The text of the syslog message corresponds to the event information displayed in the Events section of the application web interface.
TCP protocol is recommended for remote logging of events over the Syslog protocol over the network. Network ports used by the Syslog server must be open.