Security Logging Object

Defining an SLO

1. Navigate to Security > Security Logging Object.

   The Security Logging Object page is displayed.

2. Click Create to define a new security logging object.

   The Create Security Logging Object page is displayed.

   Figure 1: Create Security Logging Object

   

3. Enter the following information in the Create Security Logging Object page.

   Table 1: Create Security Logging Object Fields

   Field	Description
   Name	Enter a name for the SLO.
   Rate	Enter the number of sessions logged in the Rate field. Rate indicates the number of sessions logged. The first session in every R (rate) number of sessions matching the SLO is logged. When the rate is set to 1, all sessions are logged.
   Admin State	Select Up from the list to indicate the admin state of the security logging object.
   Network Policies	Select the network policy you want to attach to the SLO from the list. This enables logging of sessions for all virtual network interfaces that the selected network policy is attached to.
   Security Groups	Select the security groups you want to attach to the SLO from the Security Group list. This enables logging of sessions for all virtual machine interfaces that the selected security group is attached to.
   Rules
   +Add	To add a rule, click +Add.
   Type	Security Group—Select to define an SLO rule for a security group. Network Policy—Select to define an SLO rule for a network policy.
   Security Groups	Select the security group you want this SLO rule to be applied to.
   Network Policy	Select the network policy you want this SLO rule to be applied to.

4. Click the Tags tab to edit tags for the SLO.

   Figure 2: Create Security Logging Object > Tags Tab

   

   Enter the following information in the Tags page.

   Table 2: Create Security Logging Object > Tags Fields

   Field	Description
   Tier	Select a tier from the list that the SLO will monitor.
   Deployment	Select how the SLO is deployed.
   Application	Select from a list of policies created by the user that applies per application. There are global scoped policies, which can be applied globally for all projects, and project scoped policies, which are applied to specific projects.
   Site	Select a site to monitor with the SLO.
   Labels	Select from the list of labels or create your own.
   Custom	Define custom tags for a Kubernetes environment.

5. Click the Permissions tab to edit Owner Permissions and Global Share Permissions for the SLO.

   Figure 3: Create Security Logging Object > Permissions Tab

   

6. Click Create to create the SLO.

Attaching an SLO to a Virtual Network and Virtual Machine Interface

• Attaching an SLO to a Virtual Network

• Attaching an SLO to a Virtual Machine Interface

Attaching an SLO to a Virtual Network

1. Navigate to Overlay > Virtual Networks.

   The All networks page is displayed.

2. Select the virtual network you want to edit by clicking the Edit icon at the end of the row.

   The Edit Virtual Network page is displayed.

3. Click the Advanced section.
4. Select the SLO from the Security Logging Object list.
5. Click Save to save configuration.

Attaching an SLO to a Virtual Machine Interface

• Attaching an SLO to a Virtual Machine Interface while Creating a Virtual Port

• Attaching an SLO to an existing Virtual Machine Interface

Attaching an SLO to a Virtual Machine Interface while Creating a Virtual Port

1. Navigate to Overlay > Virtual Ports.

   The Virtual Ports page is displayed.

2. Click Create to create a virtual port.

   The Create Virtual Port page is displayed.

   Figure 4: Create Virtual Port

   

3. Enter the following information in the Create Virtual Port page.

   Table 3: Create Virtual Port Fields

   Field	Description
   Port Name	Enter a name for the virtual port.
   Network	Select a network that you want to associate with the virtual port.
   Security Group	Select a security group that you want to apply to the virtual port.
   Floating IPs	Select floating IPs that you want to associate with the virtual port.

4. Click the Tags tab to edit tags for the SLO.

   Table 4: Create Virtual Port > Tags Fields

   Field	Description
   Application	Select from a list of policies created by the user that applies per application. There are global scoped policies, which can be applied globally for all projects, and project scoped policies, which are applied to specific projects.
   Deployment	Indicate how the SLO is deployed.
   Site	Select or add a site the SLO will monitor.
   Tier	Select a tier from the list or enter a tier.
   Labels	Select from the list of labels or create your own.
   FWaaS	Select or add a Firewall-as-a-Service to the port for the SLO.
   Custom	Define custom tags for a Kubernetes environment.

5. Click the Permissions tab to edit Owner Permissions and Global Share Permissions for the SLO.
6. Click Create to update the configuration and create the virtual port.

Attaching an SLO to an existing Virtual Machine Interface

1. Navigate to Overlay > Virtual Ports.

   The Virtual Ports page is displayed.

2. Select the virtual port by selecting the check box next to the name of the virtual port, and click the Edit icon.

   The Edit Virtual Port page is displayed.

3. To add an SLO, click the Advanced Options section and select an SLO from the Security Logging Object(s) list.
4. Click Save to save configuration.

Editing an Existing SLO

1. Navigate to Security > Security Logging Object.

   The Security Logging Object page is displayed.

2. To select the SLO you want to edit, select the check box next to the name of the SLO. Then click the Edit icon at the end of the row.

   Figure 5: Edit Security Logging Object

   

3. Update the necessary information.
4. Click Save to save configuration.