Blue Coat Systems Blue Coat Systems SG Appliance, SGOS Version 5.2.2 manual Syslog Event Monitoring

Chapter 2: Monitoring the SG Appliance

Note: The SG appliance must know the host name or IP address of your SMTP mail gateway to mail event messages to the e-mail address(es) you have entered. If you do not have access to an SMTP gateway, you can use the Blue Coat default SMTP gateway to send event messages directly to Blue Coat.

The Blue Coat SMTP gateway only sends mail to Blue Coat. It will not forward mail to other domains.

To enable event notifications:

1.Select Maintenance > Event Logging > Mail.

2.Click New to add a new e-mail address; click OK in the Add list item dialog that appears.

3.In the SMTP gateway name field, enter the host name of your mail server; or in the SMTP gateway IP field, enter the IP address of your mail server.

4.(Optional) If you want to clear one of the above settings, select the radio button of the setting you want to clear. You can clear only one setting at a time.

5.Click Apply.

Related CLI Commands to Enable Event Notifications

SGOS#(config event-log) mail add email_address

Syslog Event Monitoring

Syslog is an event-monitoring scheme that is especially popular in UNIX environments. Sites that use syslog typically have a log host node, which acts as a sink (repository) for several devices on the network. You must have a syslog daemon operating in your network to use syslog monitoring. The syslog format is: Date Time Hostname Event.

Most clients using syslog have multiple devices sending messages to a single syslog daemon. This allows viewing a single chronological event log of all of the devices assigned to the syslog daemon. An event on one network device might trigger an event on other network devices, which, on occasion, can point out faulty equipment.

17