DeltaV system security > DeltaV Firewall IPD

Remote logging

The logs on the firewall IPD are overwritten when the log buffer is full. If you want to save long periods of log information, you can configure the firewall IPD to direct event log information to the hard drive of the Management station. Logging to a Management station uses standard syslog protocol, and a syslog daemon must run on the Management station to capture the log messages. Users are responsible for acquiring and installing the syslog daemon, and Emerson provides no support, recommendations, or warranty for any syslog daemon. The free syslog daemon for Windows is available at http://www.kiwisyslog.com/, but it has not been tested for use with the DeltaV system. Other syslog daemons are available and may be suitable for your use. Install and run the syslog daemon according to the manufacturer's instructions, and make the following configuration changes to the firewall IPD:
  1. Launch HiView on the Management station.
  2. Log onto the firewall IPD.
  3. Select DiagnosticsEventsSyslog Server.
  4. Enter the IP address of the Syslog Server. Enter port 514 if the field is not populated.

Follow these steps to save the configuration:

  1. Select Set at the bottom of the screen.

    The Writing Data message slowly fades out after a few seconds and the Load/Save screen displays a warning (yellow !).

  2. Select Save to NVM+ACA to store the configuration in the standard profile (config).

    NVM status becomes green and the warning (yellow !) no longer appears on the Load/Save screen.

  3. Reboot and check the configuration that is loaded from the standard profile (config).

The log file events will be sent to the Management station's hard drive under the directory named when the syslog daemon was installed. The log file name is specified by the manufacturer of the syslog daemon.