Information
ArubaOS-Switch provides both locally stored event and security logs, as well as using the syslog protocol to forward events to a remote server for auditing purposes. Logged events can be filtered by severity level, originating system modules, or using regular expressions to match against message text.
Solution
The syslog client is capable of connecting to a server using UDP (default) or TCP protocols. Use the following command to configure the switch to forward all events with a severity of warning or higher to a syslog server located at 10.100.1.250 using the mgmt VRF:
switch(config)# logging 10.100.1.250 vrf mgmt severity warning