Cisco Cisco Firepower Management Center 4000

In the 

 field, type the port the server uses for syslog messages. 

By default, this value is 514.

From the 

 list, select a facility.

See the 

 table for a list of the available facilities.

From the 

 list, select a severity.

See the 

 table for a list of the available severities.

In the 

 field, type the tag name that you want to appear with the syslog message.

Use only alphanumeric characters in tag names. You cannot use spaces or underscores.

As an example, if you wanted all messages sent to the syslog to be preceded with 

From

DC

, type 

From

DC

 

in the field.

Click 

.

The alert response is saved and is automatically enabled.

Any

For most types of alerting, if an alert response is enabled and in use, changes to the alert response take 
effect immediately. However, for alert responses used in access control rules to log connection events, 
changes do not take effect until you reapply the access control policy.

Admin

Select 

.

The Alerts page appears.

Next to the alert response you want to edit, click the edit icon (

).

A configuration pop-up window for that alert response appears.

Make changes as needed.

Click 

.

The alert response is saved.

Any

You can delete any alert response that is not in use.

Admin