Set up the RSA Authentication Manager to produce syslog

Refer to the section Configure the Remote Syslog Host for Real Time Log Monitoring in your RSA Authentication Manager admin guide. Follow the guide to configure your Authentication Manager server to send logs via UDP to a remote syslog server. You can only configure the IP or hostname of the remote server, but not the port, which is set to 514 by default.

For production deployments, send your logs to a Splunk Connect for Syslog instance, or to a Developer or Test Splunk platform instance that is configured to listen on port 514 .