After you set up a dedicated reporting appliance in your Grid, you must configure the Grid reporting properties so you can communicate with the reporting appliance and retrieve report data through the Grid Master. In addition, you must select the correct report categories in order for the reporting server to generate the correct data in corresponding reports, as described in Configuring Grid Reporting Properties.
By default, only superusers can configure the Grid reporting properties. When you enable the Grid reporting service, all members transmit data to the reporting server. You can disable data transmission from specific members to the reporting server. Before using the reporting service, you must configure the remote server to export the search results, as described in Reporting (Index) Storage Space. Once you configure the reporting server and enable the reporting service on Grid members, you can view and manage reports through the Reporting tab of Grid Manager.
...
- Source: From the drop-down list, select which syslog messages the appliance sends to the external syslog server:
- Any: The appliance sends both internal and external syslog messages.
- Internal: The appliance sends syslog messages that it generates.
- External: The appliance sends syslog messages that it receives from other devices, such as syslog servers and routers.
- Severity: Choose a severity filter from the drop-down list. When you choose a severity level, the appliance sends log messages with the selected level and the levels above it. The severity levels range from the lowest, debug, to the highest, emerg. For example, if you choose debug, the appliance sends all syslog messages to the server. If you choose err, the appliance sends messages with severity levels err, crit, alert, and emerg.
- emerg: Panic or emergency conditions. The system may be unusable.
- alert: Alerts, such as NTP service failures, that require immediate actions.
- crit: Critical conditions, such as hardware failures.
- err: Error messages, such as client update failures and duplicate leases.
- warning: Warning messages, such as missing keepalive options in a server configuration.
- notice: Informational messages regarding routine system events, such as "starting BIND".
- info: Informational messages, such as DHCPACK messages and discovery status.
- debug: Messages that contain information for debugging purposes, such as changes in the latency timer settings and AD authentication failures for specific users.
- Logging Category: Select one of the following logging categories:
- Send all: Select this to log all syslog messages, irrespective of categories to which it belongs. When you select this option, the appliance logs syslog messages for all the events, including all DNS and Infoblox related events. However, the syslog messages are not prefixed when you select this option.
- Send selected categories: Select this to configure logging categories from the list of available logging categories. Use the arrows to move logging categories from the Available table to the Selected table and vice versa. The appliance sends syslog messages for the categories that are in the Selected table. When you select this option, you must add at least one logging category. The syslog messages are prefixed with a category name to which it belongs. Also, the RPZ events logged in the syslog messages uses specific prefixes for the selected categories. Note that the syslog messages are prefixed when you set logging categories for at least one external syslog server, even if you set other external syslog servers as Send All.
For syslog message prefixes to be enabled, you must check the Log to External Syslog Servers check box in Grid Properties > Monitoring. Also, the external syslog server (which can be a virtual or a physical server) must have at least one of the syslog categories selected instead of the Send all option selected in the Logging Category field.
- Source: From the drop-down list, select which syslog messages the appliance sends to the external syslog server:
3. Save the configuration and click Restart if it appears at the top of the screen.
...