Skip to main content
Wirespeed can ingest Syslog logs from any source within your organization. Email addresses, IPs, and important dates are automatically identified and extracted. If you would like additional information extracted, use Chat on the left-hand navigation.

​
Set up

  1. Follow the shared Log Forwarders guide to add Generic Syslog and open Forwarder Details
  2. Configure your source to forward syslog to the IP and listener port shown there
  3. Events will begin showing up shortly

​
Troubleshooting

If events are missing or incomplete, open the Data usage tab on the integration to see what the forwarder accepted, throttled, or rejected. See Forwarder Data Usage for what each chart and error means and how to fix it.

​
Appliances that cannot use a custom syslog port in the UI

Some appliances — notably FortiGate firewalls — do not let you specify a custom syslog port in the web UI. The GUI may only expose port 514, while Wirespeed assigns a dedicated port for your integration. For FortiGate, configure syslog through the CLI using your Wirespeed-assigned port. See the Fortinet integration guide.