Realm Cloud Syslog

Create Source & Input feed

1. In Realm, go to Sources > Add Source

2. Type a name for your Source, and select a Product Format for example: Palo Alto, Fortigate etc.

3. From your source page, Click Add Input feed button.
4. Select Cloud Syslog and give it a representative name to identify the data source.

View Syslog Connection Details

In the Syslog connection details, you can find all the details necessary for configuring Syslog exporter in your vendor console.

• Click ... > View action for the Cloud Syslog input feed.

• Copy Syslog Hostname, Port & Protocol and paste it in vendor Syslog export settings.
• Copy Realm CA Certificate, save it to a file and add it as part of Syslog export settings in vendor console.

Update log sources

Update the on-prem log sources (Firewall/DNS router/Switches etc) to send logs to Realm Cloud.

• See Fortigate guide for configuring Fortigate firewall to send data to Realm.

• See Palo Alto guide for configuring Palo Alto firewall to send data to Realm.