The Generic Syslog Event collector is intended as a catchall collector for syslog events that may not be addressed by a specific product collector. It is also used as a troubleshooting tool for the Syslog Director.
To configure the Generic Syslog Event Collector, follow these steps:
Log into the SSIM Client console.
In the left pane, click System.
In the right pane, click Product Configuration.
Right-click the Generic Syslog Event Collector.
Click New. The Create a new Configuration Wizard will appear.
Click Next. Give the configuration a Name, then click Next.
Click Add. The Find Computers window will appear.
Select the SSIM appliance then click Add.
Click Next, then Finish.
Now that the configuration is created, verify the sensor settings.
Click on the new configuration you just created.
Click the SysLog Sensor tab.
Check the box next to Sensor 0 to activate the sensor.
Leave the port number at 10518.
Right click the configuration and click Distribute.