This help page is for version 7.3. The latest available help is for version 8.1.
The Syslog action will send a summary description of a monitor's findings as a Syslog event. You can configure the action to send the log event to any server/device on the network that is listening for syslog events.
You can indicate just a hostname or IP address, in which case port 514 will be used. Or you can use a hostname:port or IP address:port format to target a different port.
You configure which syslog facility should be used when sending the log event, as well as the severity that should be used.
Multiple Syslog Actions could be set up to send different logs to different Syslog servers. Some monitors could then use one Syslog Action, and other monitors could send alerts through a different Syslog Action.