Configuring the Syslog Service on Check Point devices

To configure the Syslog service in your Check Point devices, follow the steps below:

1. Login to the Check Point device as an administrator.
2. To override the lock, click on the lock icon on the top-left corner of the screen.
3. Click Yes on the confirmation pop-up that appears.
4. Navigate to System Management > System Logging.
5. Under the Remote System Logging section, click Add.
6. In the Add Remote Server Logging Entry window, enter the IP address of the remote server (EventLog Analyzer server).
7. From the Priority drop-down, select the severity level of the logs to be sent to the remote server.
8. Click OK.