# Enable or Check Syslog/CEF on SonicWall

1. <span style="color: rgb(53, 152, 219);">**Log in to SonicWall UI**</span>
    - Open a web browser
    - Go to your SonicWall’s IP (e.g., `https://192.168.1.1`)
    - Login with your admin credentials
2. <span style="color: rgb(53, 152, 219);">**Navigate to Log Settings**</span>
    - Go to: 
        - Log &gt; Syslog
        - (On older firmware: `Log > Syslog > Syslog Servers`)
    - You’ll see the list of configured **Syslog Servers**
3. <span style="color: rgb(53, 152, 219);">**Check Syslog Server Configuration**</span>
    - Make sure the following are set: 
        - ****Syslog Server IP Address**:** should be the IP of the ****Elastic Agent**** host
        - **Port**: default is **514** for UDP, or **6514** for TCP/TLS
        - **Syslog Format**: 
            - Can be set to **Default**, **Syslog**, or **CEF** (Common Event Format)
            - For Elastic integrations, **Syslog** or **CEF** is typically supported
4. <span style="color: rgb(53, 152, 219);">**Enable Log Categories**</span>
    - Still under **Log &gt; Syslog**, click **Syslog Settings**
    - Ensure that **Important log categories** are **enabled for syslog**, like: 
        - **Firewall**
        - **VPN**
        - **System**
        - **User Activity**
        - **Connection dropped**
    - Set **Alert level** or **Priority**: e.g., **Information** or **Notice**
5. <span style="color: rgb(53, 152, 219);">**If Using CEF Format (For Elastic Agent CEF Integration)**</span>
    - Some SonicWall models support **CEF log format**: 
        - Go to **Log &gt; Syslog**
        - Look for an option like **“Syslog Format”** or **“Use CEF”**
        - Enable **CEF output**
    - *Note:* Not all SonicWall devices support native CEF.
6. <span style="color: rgb(53, 152, 219);">**Advanced Settings (Optional)**</span>
    - Under **Log &gt; Syslog Settings**, check: 
        - Syslog Facility (can be left as default: `Local0` or `Local4`)
        - Use **Syslog over TLS** if required, and provide the correct certs
7. <span style="color: rgb(53, 152, 219);">**Save and Apply**</span>
    - Click **Apply** or **Accept** to confirm changes
    - Ensure the firewall can reach the Elastic Agent on the configured port