Security Logging Configuration Page Options

  1. Select Configure>Security>Logging in the J-Web user interface.

    The Security Logging configuration page appears. Table 99 explains the contents of this page.

  2. Click one:
    • OK—Saves the configuration and returns to the main configuration page.
    • Commit Options>Commit—Commits the configuration and returns to the main configuration page.
    • Cancel—Cancels your entries and returns to the main configuration page.

Table 99: Security Logging Configuration Page

Field FunctionAction
System Logging

No Logging

Disables all security logs. You can select this option to optimize performance.

Local

Allows you to store the security logs in the Routing Engine. In this mode, you can specify a log file and its size. You can create a new log file or select an existing log file.

  • File Name – Specifies a new log filename.
  • Select – Select an existing log file.
  • Size – Custom or Default.
    • Custom – Allows you to set the archive size for a log file.
    • Default – Specifies that no archive size be set.

Clear All – Clears the inactive log files and configurations, and retains only the configuration of the active log file.

Clear Active – Clears the active log file.

Enter a filename or browse to the location to select an existing file.

Note: There is only one active log file. When you create a new log file, the current active log file becomes inactive and the new log file is active.

Syslog Server

Allows you to send security logs to the syslog server.

  • Log Source Address–Specifies the server IP address.

    Note: The log source address is required only if the server information is configured.

  • Enable UTC Timestamps – Records the time in Coordinated Universal Time (UTC). UTC is also known as Greenwich Mean Time (GMT), which is the basis for the international time standard.

Add Syslog Server

Enables you to configure syslog servers. You can configure a maximum of three syslog servers.

To add a syslog server configuration, enter the server name, server IP, and log type, and click Add.

The log types are:

  • Structure
  • Standard
  • Web

To remove a syslog server configuration, select a syslog server configuration and click Remove.

Application Tracking

Enable Application tracking

Enables or disables application tracking. You can set the following:

  • Log as session(s) created – Generates a log message when a session is created. By default, this option is disabled.
  • Delay logging first session(s) – Enables you to specify the length of time that must pass before the first log message is created. The default is 1 minute.
  • Frequency of session updates – Enables you to set the interval at which update messages are sent. The default is 5 minutes.

Select the Enable Application Tracking check box to enable application tracking. Clear the check box to disable application tracking.

   
Enable Application tracking by Zone

Available Zones

Lists the available zones.

To enable application tracking, select the zone and click the right arrow to move it to the tracking enabled list.

Tracking Enabled

Lists the zones to be tracked.

To disable application tracking, select the zone and then click the left arrow to move the zone back into the available list.

Related Documentation