To facilitate the integration with external log parsing
systems, the firewall allows you to customize the log format; it
also allows you to add custom Key: Value attribute
pairs. Custom message formats can be configured under DeviceServer ProfilesSyslogSyslog Server ProfileCustom Log Format.
To achieve ArcSight Common Event Format (CEF) compliant log formatting,
refer to the CEF Configuration Guide.