All system log messages are written to local log files on WebTitan using syslog. Syslog is the de facto standard for forwarding log messages in an IP network.


The Remote Syslog section allows you to enable a remote syslog interface server and a remote syslog access server. Remote syslog is a mechanism for sending log files from the Interface log server and/or the Access log server to a syslog daemon running on a remote server. This may be useful for users who wish to use their own software tools to view and analyze the log files.


The Interface log provides an audit trail of all changes to the WebTitan GUI such as policy changes, setting working times, and adding users. You can view the Interface log files in the Logs section. To enable remote syslog on the Interface log server, set the Status field in the Remote Interface Syslog section to ON by clicking on the Enable button.


The Access log provides an audit trail of all URL requests made through WebTitan. Each line in the log file shows when a request was made, the user who made the request, the policy being used, the URL requested, whether the request was blocked (with a reason) or allowed, and the IP address. The Access log file is not stored on the WebTitan appliance and is only available via remote syslog. To enable remote syslog on the Access log server, set the Status field in the Remote Access Syslog section to ON by clicking on the Enable button.


 The Remote Syslog settings are configured in Logs > Remote Syslog