How does CEF know where to look on Syslog server for logs. Documentation unclear.

Hi,   I'm trying to get ASA data in to Sentinel and can't figure out how the Syslog agent is supposed to know where to look for our ASA logs. The documentation labels these 4 steps; Select or creat...