Configuring the SYSLOG Server

Configure the SYSLOG server address for logging DTM and module events:

Step

Action

1

In Control Expert, select Tools > Project Settings .

2

In the left pane of the Project Settings window, select Project Settings > General > PLC diagnostics.

3

In the right pane:

  • Select the PLC event logging check box.

  • In the SYSLOG server address field enter the IP address of the SYSLOG server.

  • In the SYSLOG server port number field, enter the port number.

NOTE: The SYSLOG server protocol is not configurable, and is set to tcp by default.
NOTE: Refer to the Modicon Controllers Platform Cyber Security Reference Manual for information on setting up a SYSLOG server in your system architecture.

DTM Events Logged to the SYSLOG Server

These DTM events are logged to the SYSLOG server:

  • Configuration parameter change

  • Add/Delete device

  • Rebuild All

  • Build Changes

  • Renaming of I/O variables

  • Add/Modify tasks

BME•58•0•0 CPU Events Logged to the SYSLOG Server

These BME•58•0•0 CPU events are logged to the SYSLOG server:

  • TCP connection error due to Access Control List

  • Enable/Disable of communication services outside configuration

  • Ethernet port link up/down events

  • RSTP topology change

  • Program operating mode change of COMs (RUN, STOP, INIT)

  • Successful and unsuccessful FTP login