Hi, Unfortunately, MS120 switches do not support customization of syslog severity levels. They only send Event Log messages, and these are typically logged at the “Informational” level.   Syslog Server Overview and Configuration - Cisco Meraki Documentation   The Dashboard allows you to configure alert profiles for various events (e.g., port down, switch offline, high CPU). And you can send these alerts via email or webhook. You can then integrate these alerts with your SIEM, either by forwarding alert emails to a monitored mailbox that your SIEM ingests, or by using webhooks to send alerts to a custom endpoint that your SIEM can analyze. ... View more