Connect Citrix WAF¶
Citrix WAF sends syslog messages in CEF format to a the LogSentinel Collector's syslog listener. Follow Citrix's instructions to:
Make sure you send the logs to TCP port 514 on the log collector's machine's IP address.
Note
Make sure that all firewalls (including the firewall on the collector machine) allow connections to the collector port