- Log in to your Symantec Endpoint Protection Manager system.
- In the left pane, click the Admin icon.
- In the bottom of the View Servers pane, click Servers.
- In the View Servers pane, click Local Site.
- In the Tasks pane, click Configure External Logging.
- From the Generals tab, select the Enable Transmission of Logs to a Syslog Server check box.
- In Syslog Server, type the IP address of your Barracuda XDR Sensor that you want to parse the logs.
- In UDP Destination Port, type
514
. - In Log Facility, type
6
. - Click the Log Filter tab.
- In the Management Server Logs area, select the Audit Logs check box.
- In the Client Log pane, select the following check boxes:
- Security Logs
- Client Log
- Click OK.
Barracuda XDR