SIEM Server and Log Parameters Set up

to configure siem integration navigate to administration > system config management > integrations select the siem configuration click to add the siem server set the following parameters and click save parameter name parameter default values possible values siem host name syslog server hostname 10 20 10 10 siem port syslog server port 514 rfc format syslog message rfcformat rfc 5424 rfc 5424, rfc 3164 protocol syslog connection protocol udp tcp, udp content format syslog message content format key value key value, cef, legacy cef establish an ssh connection to the kron pam server and restart pam gui with the command systemctl restart pam gui