The Syslog monitor listens for Syslog messages on the devices to which it is assigned.
Provide a unique name and description for the monitor, then click Add to launch the Rules Expression Editor to create an expression, test it, and compare it to potential payloads.
Important: If you have multiple payload "match on" expressions, they are linked by "OR" logic—not "AND" logic. If you have two expressions, one set to "AB" and the other to "BA", it matches against a trap containing any of the following: "AB" or "BA" or "ABBA".