User's Manual Part 4

Page 88 SonicWALL SonicOS Standard Administrator’s Guide
To add syslog servers to the SonicWALL, click Add. The Add Syslog Server window is displayed.
1. Enter the Syslog server name or IP address in the Name or IP Address field. Messages from the
SonicWALL are then sent to the servers. Up to three Syslog Server IP addresses can be added.
2. If your syslog is not using the default port of 514, enter the port number in the Port Number field.
3. Click OK.
If the SonicWALL is managed by SGMS, however, the Syslog Server fields cannot be configured by the
administrator of the SonicWALL.
Syslog Event Redundancy Filter (seconds) - The Syslog Event Redundancy Filter setting prevents
repetitive messages from being written to Syslog. If duplicate events occur during the period specified in
the Syslog Event Redundancy Rate field, they are not written to Syslog as unique events. Instead, the
additional events are counted, and then at the end of the period, a message is written to the Syslog that
includes the number of times the event occurred.
The Syslog Event Redundancy Rate default value is 60 seconds and the maximum value is 86,400
seconds (24 hours). Setting this value to 0 seconds sends all Syslog messages without filtering.
Syslog Format - You can choose the format of the Syslog to be Default or WebTrends. If you select
WebTrends, however, you must have WebTrends software installed on your system.
Log>Reports
The SonicWALL can perform a rolling analysis of the event log to show the top 25 most frequently
accessed Web sites, the top 25 users of bandwidth by IP address, and the top 25 services consuming the
most bandwidth. Click Log on the left side of the browser window, and then click the Reports.