Syslog

Dashboard Location: Network-wide > Configure > General > Reporting

Syslog server configuration in Meraki enables centralized logging and monitoring by forwarding network events, security logs, and operational data to external log management systems. Syslog integration supports comprehensive network visibility, compliance reporting, and security incident analysis through standardized log forwarding to SIEM platforms, log aggregators, and monitoring solutions. This functionality provides role-based log filtering, ensuring relevant events are sent to appropriate monitoring systems based on operational requirements.

Example-1: The example below demonstrates basic syslog configuration for a small office deployment with essential event logging to a central syslog server.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              syslog_servers:
                - host: 1.2.3.4
                  port: 514
                  roles:
                    - Switch event log
                    - Air Marshal events
                    - Flows
                    - URLs
                    - Wireless event log
                    - Appliance event log