Logging to an external syslog server is disabled by default, however Avaya maintains a local log, regardless of whether logging to an external is enabled or not.
Syslog always logs security violation events. These cannot be disabled through the administrative interface.
Old/new values are logged according to administration on the logging levels form.
You can enable logging to one external server only. Configuration parameters for the external syslog server are added to the /etc/syslog.conf file. If you disable sending these events, the configuration parameters are removed from syslog.conf file.
You can synchronize the syslog.conf file to the standby server and all ESS/LSP servers.
The external syslog server configuration is saved as part of the security backup data set.
The server firewall automatically opens outbound for the syslog port (514 UDP) if the user enables logging to an external syslog server and automatically closes if logging is not enabled.