If Deep Security Manager is not sending logs to the syslog server after a recent event, customers can try rebooting the DSM and server and waiting for 5-10 minutes to see if the issue resolves. It is also important to note when the last time the sending of events from DS to syslog worked.

If the issue persists after trying these steps, customers can refer to KB article below for further troubleshooting steps. This article provides detailed instructions on how to check the syslog configuration settings and verify that the syslog server is reachable from the DSM.

https://success.trendmicro.com/dcx/s/solution/000294845?language=en_US
https://success.trendmicro.com/dcx/s/solution/1113583-deep-security-manager-dsm-fails-to-send-system-event-via-syslog?language=en_US