To facilitate the integration with external log parsing
systems, the firewall allows you to customize the log format; it
also allows you to add custom Key: Value attribute
pairs. Custom message formats can be configured under
Device
Server Profiles
Syslog
Syslog Server Profile
Custom Log Format
.
To achieve ArcSight Common Event Format (CEF) compliant log formatting,
refer to the CEF Configuration Guide.