Syslog monitor listens for Syslog messages on the devices to which it is assigned.
Note: For more information about Syslog facilities and levels of severity, see RFC5424 (page 9 for facilities and page 10 for levels of severity).
Provide a unique name and description for the monitor, then click Add to launch the Rules Expression Editor to create an expression, test it, and compare it to potential payloads.
Important: If you define multiple payload Match On expressions, each expression is considered individually (think "or" operator).