SIEM Server and Log Parameters Set up

to configure siem integration navigate to administration > system config management set the following parameters and click save parameter default value possible values syslog server hostname 10 20 41 69#10 20 41 59 syslog server port 514 syslog message rfcformat rfc 5424 rfc 5424, rfc 3164 syslog connection protocol udp udp, tcp syslog message content format key value key value, cef, legacy cef establish an ssh connection to the kron pam server and restart pam gui with the command systemctl restart pam gui