User guide

Designating Log Hosts for a Firebox
User Guide 177
Changing the log encryption key
Edit a log host entry to change the log encryption key. From Policy
Manager:
1 Select Setup => Logging.
The Logging Setup dialog box appears.
2 Click the host name. Click Edit.
3 Type in the new log encryption key. Click OK.
You must use the same log encryption key for both the Firebox and the
WatchGuard Security Event Processor. To change the log encryption key on the
WSEP application, see “Setting the log encryption key” on page 181.
Removing a log host
Remove a log host when you no longer want to use it for any logging
purpose. From Policy Manager:
1 Select Setup => Logging.
The Logging Setup dialog box appears.
2 Click the host name. Click Remove.
3 Click OK.
The Logging Setup dialog box closes and removes the log host entry from the
configuration file.
Reordering log hosts
Log host priority is determined by the order in which the hosts appear in
the WatchGuard Security Event Processor list. The host that is listed first
receives log messages.
Use the Up and Down buttons to change the order of the log hosts. From
the Logging Setup dialog box:
• To move a host down, click the host name. Click Down.
• To move a host up, click the host name. Click Up.
Synchronizing log hosts
Synchronizing log hosts involves setting the clocks of all your log hosts to
a single common time source. This keeps logs orderly and prevents time
discrepancies in the log file if failovers occur.