Remote Syslog FAQ

This is done by enabling Syslog under Config > Events > Syslog. More information regarding the process including how to create Syslog Event rules can be found in the article below:

https://support.untangle.com/hc/en-us/articles/115012950828-How-to-Create-Syslog-Event-Rules 

NG Firewall can send data to any syslog server that is using standard syslog format and syntax. Some syslog products are easier to set up than others. Kiwi, a third-party syslog daemon, is a favorite of many admins using Windows, while those on *nix can use rsyslog.

Syslog uses a considerable amount of resources when enabled. The resource usage increases with the amount of data being gathered and sent to a remote server. Our default rule, which is meant as nothing more than a placeholder and example for reference, has all classes selected so uses the most amount of resources. On devices that are already fairly busy this can cause performance issues.

The default rule is meant as nothing more than a placeholder and example for reference.

Yes, you can send syslog data to any IP address that the NG Firewall is able to access.