When you configure the Logging settings for your XTM device, you can select to send log messages to a WatchGuard Log Server. This can be the WatchGuard Log Server that is a component of WatchGuard System Manager, or the Dimension Log Server that is a component of WatchGuard Dimension. If you have either type of WatchGuard Log Server, you can configure a primary Log Server and backup Log Servers to collect the log messages from your XTM devices. You designate one Log Server as the primary (Priority 1) and other Log Servers as backup servers.
If the XTM device cannot connect to the primary Log Server, it tries to connect to the next Log Server in the priority list. If the XTM device examines each Log Server in the list and cannot connect, it tries to connect to the first Log Server in the list again. When the primary Log Server is not available, and the XTM device is connected to a backup Log Server, the XTM device tries to reconnect to the primary Log Server every 6 minutes. This does not impact the XTM device connection to the backup Log Server until the primary Log Server is available.
For more information about WatchGuard System Manager Log Servers and instructions to configure the Log Server to accept log messages, see the Fireware XTM WatchGuard System Manager Help.
For more information about WatchGuard Dimension Log Servers, and instructions to configure your Dimension Log Server, see the WatchGuard Dimension Help.
To send log messages from your XTM device to a WatchGuard Log Server:
About Logging, Log Files, and Notification
Configure Syslog Server Settings
Include Performance Statistics in Log Messages