Monitor Session

You are here: Monitor > Logs > Session.

Use the monitoring functionality to view the firewall events or sessions that occurred during the time period specified.

Note

Session page is available on all the SRX Series devices except the SRX5000 line of devices.

Table 1 describes the fields on the Session page.

Table 1: Fields on the Session Page

Field	Description
Last	Select the time from the list to view the activity that you are most interested in. Once the time is selected, all of the data presented in your view is refreshed automatically. You can also use Customize to set a custom date and click Apply to view the specified session logs.
Refresh	Click the refresh icon to get the latest session information.
Show Hide Columns	This icon is represented by three vertical dots. Enables you to show or hide a column in the grid.
Export to CSV	You can export the session data to a comma-separated value (.csv) file. Select the three vertical dots on the right-side of the page and click Export to CSV. The CSV file is downloaded to your local machine. You can download only maximum of 100 sessions data.
Filter Criteria	Use the filter text box present above the table grid. The search includes the logical operators as part of the filter string. In the filter text box, when you hover over the icon, it displays an example filter condition. When you start entering the search string, the icon indicates whether the filter string is valid or not.
X	Click X to clear your search filter.
Save Filter	Click Save Filter to save filters after you specify the filtering criteria. To save a filter: Enter the filter criteria you are looking for in the advanced search box. Click Save Filter. Enter a name for the filter and click the tick icon to save it.
Load Filter	Displays the saved filters list. Hover over the saved filter name to view the query expression. You can delete the saved filter using the delete icon.
Time	Displays the time when the log was received.
Log Type	Displays the log type.
Source Zone	Displays the source zone of the session.
Source IP	Displays the source IP address from where the session occurred.
User	Displays the username from whom the session log is generated.
Destination Zone	Displays the destination zone of the session.
Destination IP	Displays the destination IP of the session occurred.
Destination Port	Displays the destination port of the session.
Application	Displays the application name from which the session logs are generated.
Action	Displays the action taken for the event: warning, allow, and block.
Policy	Displays the destination country of the log.
Bandwidth	Displays the bandwidth utilization for the session.
NAT Source IP	Displays the translated (or natted) source IP address. It can contain IPv4 or IPv6 addresses.
NAT Source Port	Displays the translated source port.
NAT Destination IP	Displays the translated (also called natted) destination IP address.
NAT Destination Port	Displays the translated destination port.
Protocol ID	Displays the protocol ID in the log.
Session ID	Displays the traffic session ID of the log.
Interface	Displays the interface of the session.
Closure Reason	Displays the reason for the log generation. For example, a connection tear down may have an associated reason such as authentication failed.
Packets From Client	Displays the number of packets received from the client.
Bytes From Client	Displays the number of bytes received from the client.
Packets From Server	Displays the number of packets received from the server.
Bytes From Server	Displays the number of bytes received from the server.
Elapsed Time	Displays the time elapsed since the last time interval began.
Source Port	Displays the port number of the source.

Monitor Session

Related Documentation