Configuring TOS to Use RFC 3339 for Syslog Notifications

This procedure explains how to configure TOS to use the RFC 3339 standard for the following outbound syslog notifications:

  • Audit Trail notification

  • Policy change notifications

  • Securetrack Administrator alerts

Configure the time stamp format

  1. Go to: https://<SecureTrack_IP>/securetrack/admin/stcgitest.htm
  2. Go to Edit StConf > Fetch StConf.
  3. In the <syslog> section, set <syslog_timestamp> to rfc3339.

  4. Click Submit New Conf.

Sample code

<syslog>
  <syslog_server/>
  <port>514</port>
  <protocol>udp</protocol>
  <policy_syslog>0</policy_syslog>
  <admin_alerts_syslog>0</admin_alerts_syslog>
  <audit_trail_syslog>0</audit_trail_syslog>
  <original_syslog_format>1</original_syslog_format>
  <syslog_timestamp>rfc3339</syslog_timestamp>
</syslog>