Network Threat Protection Attack logs which are available under Monitor>Logs>Network Threat Protection>Attack, cannot be forwarded to external syslog server: Admin->Servers->Local site->External looging for local site->Log filter, attack log is not listed
The suggestion for Symantec is simply to add these logs in the selection panel of External looging for local site->Log filter. If they can be accessed on Monitors, it should be easy to make them available for exporting to a syslog server. Thanks.
Related to Case Number 09853963