Add a syslog device to SEM

After you configure your syslog device to send events to SEM and verify that SEM is receiving the events, add the syslog device to SEM.

When you add a syslog device to SEM, select a connector that is specific to the network device you are adding. The connector normalizes the log data into a standard format that can be compared with logs received from other vendors' devices. See SEM Connector List for a list of supported connectors.

The following example describes how to add a Cisco ASA firewall to SEM. See Integrate Cisco network devices with SolarWinds SEM for more information on adding Cisco devices to SEM.

After you configure your firewall to log to your SEM appliance, configure the corresponding connector on your SolarWinds SEM Manager. Many of the firewall connectors are similar, and some will include unique settings.

This example describes how to configure a Cisco PIX and IOS connector on your SEM Manager.

  1. In the SEM events Console, navigate to Node > Manager Connectors.

  2. Find the connector to configure. Type part of the connector name (Cisco PIX) in the search box, or use the filter menus in the Refine Results panel.

  3. Select the connector, and then click Add Connector.

  4. Complete the connector configuration form. The following fields are common across most connectors:
    • Name: Enter a user-friendly label for your connectors.
    • Log File: Enter the location of the log file that the connector will normalize. This is a location on either the local computer (Agents), or the SEM appliance (non-Agent devices).
    • Output: Normalized, Raw + Normalized, Raw. You only need to configure these values if SEM is configured to save raw (unnormalized) log messages.
  5. Click Add.
  6. Under Configured connectors, select your connector, and then click Start.