Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Custom Filters and Formats for Log Files (NSM Procedure)

    To configure custom filters and formats for log files:

    1. In the NSM navigation tree, select Device Manager > Devices. Click the Device Tree tab, and then double-click the Secure Access device for which you want to configure custom filters and formats for log files.
    2. Click the Configuration tab, and select System > Log/Monitoring > Filters. The corresponding workspace appears.
    3. Add or modify settings as specified in Table 1.
    4. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modification.

    Table 1: Custom Filters and Formats for Log Files Configuration Details

    OptionFunction Your Action

    Filter Name

    Specifies the name of the filter.

    Enter the name.

    Start Date

    Specifies the start date in which the Secure Access device writes logs in the log file.

    Enter the start date.

    End Date

    Specifies the end date in which the Secure Access device writes logs in the log file.

    Enter the end date.

    Query

    Allows the user to view the logs in different formats.

    Enter the custom expression.

    Note: Any string (including a * wildcard character) you manually enter in a query must be enclosed in double-quotes.

    Format Type

    Specifies the format of the data in the log.

    Select one of the following options:

    • Standard—This log filter format logs the date, time, node, source IP address, user, realm, and the Secure Access device event ID and message.
    • WELF—This customized WebTrends Enhanced Log Format (WELF) filter combines the standard WELF format with information about the Secure Access device realms, roles, and messages.
    • W3C—The World Wide Web Consortium’s extended log file format is a customizable ASCII format with a variety of different fields. Visit http://www.w3.org for more information about this format. Only the User Access log offers this filter as an option.
    • Custom—Allows you to enter the format you want to use.

    Custom Format

    Customizes the format of the data in the log.

    Note: This box is enabled only when you select Custom from the Format Type drop-down list.

    Enter the format.

    Note: When entering a format, surround variables with percentage symbols (for example %user%). All other characters are treated as literals.

    Published: 2013-01-03