Configure a Syslog-based Error Log Publisher using the dsconfig tool. You should use syslog locally on localhost and use syslog-ng to send the data packets over the UDP protocol.
Because syslog implementations differ by vendor, review your particular vendor’s syslog configuration.
Use dsconfig to create a log publisher of type
syslog-based-error.
In this example, set the syslog facility to 4 for security/authorization messages.
$ bin/dsconfig create-log-publisher --publisher-name "syslog-error" \
--type syslog-based-error --set syslog-facility:4 --set enabled:true