Configuring Remote Hosts for Syslog Messages
All system log messages are written to local log files on WebTitan Cloud using syslog, the de facto standard for forwarding log messages in an IP network.
Go to Logs > Remote Syslog to enable a remote syslog interface server and/or a remote syslog access server.
Remote syslog is a mechanism for sending log files from the Interface log server and/or the Access log server to a syslog daemon running on a remote server. This may be useful for users who wish to use their own software tools to view and analyze the log files.
Remote Interface Syslog
The Interface log provides an audit trail of all changes to the WebTitan Cloud GUI, such as policy changes, setting working times and adding users. Interface log files are available in the Logs > Interface.
To enable remote syslog on the Interface log server:
Go to Logs > Remote Syslog > Remote Interface Syslog.
Click Enable to set the Remote Interface Syslog to ON.
Enter your syslog server in the Syslog server: field.
Click Save.
Once enabled, click Disable to disable remote syslog on the Interface log server.
Remote Access Syslog
The Access log provides an audit trail of all URL requests made through WebTitan Cloud. Each line in the log file shows when a request was made, the user who made the request, the policy being used, the URL requested, whether the request was blocked (with a reason) or allowed, and the IP address.
The Access log file is not stored on the WebTitan Cloud appliance and is only available via remote syslog.
To enable remote syslog on the Access log server:
Go to Logs > Remote Syslog > Remote Access Syslog.
Click Enable to set the Remote Access Syslog to ON.
Enter your syslog server in the Syslog server: field.
Click Save.
Once enabled, click Disable to disable remote syslog on the Access log server.