Technical Documentation

Configuring Custom Filters and Formats for Log Files (NSM Procedure)

To configure custom filters and formats for log files:

  1. In the NSM navigation tree, select Device Manager > Devices. Click the Device Tree tab, and then double-click the Secure Access device for which you want to configure custom filters and formats for log files.
  2. Click the Configuration tab, and select System > Log/Monitoring > Filters. The corresponding workspace appears.
  3. Add or modify settings as specified in Table 1.
  4. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modification.

Table 1: Custom Filters and Formats for Log Files Configuration Details

OptionFunction Your Action

Filter Name

Specifies the name of the filter.

Enter the name.

Start Date

Specifies the start date in which the Secure Access device writes logs in the log file.

Enter the start date.

End Date

Specifies the end date in which the Secure Access device writes logs in the log file.

Enter the end date.

Query

Allows the user to view the logs in different formats.

Enter the custom expression.

Note: Any string (including a * wildcard character) you manually enter in a query must be enclosed in double-quotes.

Format Type

Specifies the format of the data in the log.

Select one of the following options:

  • Standard—This log filter format logs the date, time, node, source IP address, user, realm, and the Secure Access device event ID and message.
  • WELF—This customized WebTrends Enhanced Log Format (WELF) filter combines the standard WELF format with information about the Secure Access device realms, roles, and messages.
  • W3C—The World Wide Web Consortium’s extended log file format is a customizable ASCII format with a variety of different fields. Visit http://www.w3.org for more information about this format. Only the User Access log offers this filter as an option.
  • Custom—Allows you to enter the format you want to use.

Custom Format

Customizes the format of the data in the log.

Note: This box is enabled only when you select Custom from the Format Type drop-down list.

Enter the format.

Note: When entering a format, surround variables with percentage symbols (for example %user%). All other characters are treated as literals.