The user is not able to get the information and warning events, the system only sends severe events via Syslog.
It's working as per design. The user will not be able to get the information and warning events, the system only sends Severe events via Syslog Server. DLP (Data Loss Prevention) integrates with ICA Information Centric Analytics which provides the same feature of reporting for DLP.
For ICA configuration, please contact the ICA team. Please find the link below for the Information Centric Analytics user guide:
For reference:
Steps to implement:
systemevent.syslog.level = x