report (Security Log)

Syntax

Syntax (SRX4600)

Hierarchy Level

Description

Set security log report settings.

On-box reporting offers a comprehensive reporting facility where your security management team can spot a security event when it occurs, immediately access and review pertinent details about the event, and quickly decide appropriate remedial action.

The on-box reporting feature is enabled by default on a SRX Series Firewall with Junos OS Release 15.1X49-D100 or later.

If you are upgrading your SRX Series Firewall from a Junos OS Release prior to Junos OS 15.1X49-D100, then on-box reporting feature is disabled by default. You need to run the set security log report command to enable the on-box reporting feature on the device.

Options

report	Enable log report.
logs-per-table	Log number for each table.
idp	Log number of idp. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
ipsec-vpn	Log number of IPsec-VPN. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 26666 through 26666 Default: 26666 Range: For SRX1500, SRX4100, and SRX4200: 333333 through 333333 Default: 333333 Range: For SRX4600: 666666 through 666666 Default: 666666
screen	Log number of screen. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
session-all	Log number of session. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 80000 through 800000 Default: 80000 Range: For SRX1500: 533333 through 5333333 Default: 533333 Range: For SRX4100 and SRX4200: 666666 through 6666666 Default: 666666 Range: For SRX4600: 1000000 through 10000000 Default: 1000000
sky	Log number of SKY. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
Content Security	Log number of Content Security. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
table-lifetime	Table lifetime days. Default: 90 Range: 0 through 365
table-mode	Report table mode. `dense`- Enable table dense mode. Default: `dense` mode is enabled by default from Junos OS Release 23.2R1 onwards. Note: Before upgrading from Junos OS Release 22.4 or earlier to Junos OS Release 23.2 or later, you must remove the `set security log report table-mode dense` configuration. `disable-dense`- Disable table dense mode.

Required Privilege Level

The remaining statements are explained separately. See CLI Explorer.

Release Information

Statement introduced in Junos OS Release 15.1X49-D100

The [edit logical-systems name security log] and [edit tenants tenant-name security log] hierarchy levels introduced in Junos OS Release 19.1R1.

table-mode option added in Junos OS Release 19.4R1.

ON THIS PAGE