Logs path when log server is separated

[maddah87]

Hi,

When Log server is separately deployed, are gateways directly sending logs to log server or are they coming to Log server via SMS?

[Chris_Atkinson]

Direct depending on your configuration of the Gateway object.

[maddah87]

I actually not third party log servers. When the server is defined as Log/Smart Event only in initial config, do gateways sends logs directly to Log Server or not. If are to do separate config what should we do to gateway object. Appreciate sharing some articles.

[the_rock]

By default, CP gateways will log to mgmt server. However, as Chris had said, if you wish those logs from mgmt to be sent elsewhere, you can do that as per below option.

Andy

 

[Tal_Paz-Fridman · Accepted solution]

As Chris wrote logs are sent directly to a Log Server (after configuring in SmartConsole). The purpose of this is to reduce the logging load on the Security Management Server and  enables placing Log Servers in different geographical locations alongside various Security gateways.

Adding screenshot of Logs topic on Security Gateway object. Note that you can even select to distribute the load between several Log Servers:

[maddah87]

Thanks, So Clear, Appreciate it