---
title: SIEM Server and Log Parameters Set up
slug: kronpam-how-to-guides/siem-server-and-log-parameters-set-up
description: Learn how to configure the SIEM server and log parameters in Kron PAM with this comprehensive document. Discover step-by-step instructions for setting up server information and packet content through system configuration parameters. Explore the process of
docTags: 
createdAt: 2022-08-15T10:58:01.000Z
---

Kron PAM can send the logs selected in the SIEM Kron PAM can send the logs selected in the SIEM configuration page to the syslog listener. The information related to the server and content of the packets is managed with parameters defined in the System Config. Man. screen. The server to which the packets are sent can be configured using the parameters listed in the table below.

To configure SIEM integration: 

1. Navigate to **Administration** > **System Config Management > Integrations**.
2. Select SIEM Configuration.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/K-5SSPrEkwqbl1RSrHH_H_image.png "SIEM Configuration Selection")

- Click to Add SIEM Server.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-5yJkya8il2PpyEEuRZYP_image.png "Add SIEM Server")

- Set the following parameters and **Save**.

| ** Parameter Name** | ** Parameter **                     | **Default Values ** | **Possible Values **     |
| ------------------------ | --------------------------------------------- | ------------------------ | ----------------------------- |
| ** SIEM Host Name** | ** syslog.server.hostName **        | -                        | 10.20.10.10                   |
| ** SIEM Port**      | ** syslog.server.port **            | 514                      |                               |
| ** RFC Format**     | ** syslog.message.rfcFormat **      | RFC\_5424                | RFC\_5424, RFC\_3164          |
| ** Protocol**       | ** syslog.connection.protocol**          | UDP                      | TCP, UDP                      |
| ** Content Format** | ** syslog.message.content.format ** | KEY\_VALUE               | KEY\_VALUE, CEF, LEGACY\_CEF  |

- Establish an SSH connection to the Kron PAM server and restart netright-tomcat with the following command: \[root\@sc\~]# systemctl restart netright-tomcat