CLI Configuration

Use the following commands to set the described trace options:

• Set remote tracing as disabled.

  user@host # set security traceoptions no-remote-trace

• Set the local writing of trace files. (The trace file is saved in the /var/log/ directory.)

  user@host # set security traceoptions use-local-files

• Set file name. If you do not create a name, the default name for this file is “security.”

  user@host # set security traceoptions file <filename>

• Set the maximum number of trace files that can accumulate. (The default is 3.)

  user@host # set security traceoptions file files 3

• Set matching criteria for logging data to the trace file. This criteria is a regular expression for matching against. Wildcard (*) characters are accepted.

  user@host # set security traceoptions file match *thread

• Set world-readable or not.

  user@host # set security traceoptions file world-readable

  user@host # set security traceoptions file no-world-readable

• Set maximum trace file size. Once the file reaches that size, it is compressed and renamed to<filename>0.gz and the next one is named <filename>1.gz, and so on.

  user@host # set security traceoptions file size 10240

• To turn traceoptions on and to perform more than one tracing operation, set the following flags:

  user@host # set security traceoptions flag all

  user@host # set security traceoptions flag compilation

  user@host # set security traceoptions flag configuration

  user@host # set security traceoptions flag routing-socket

• Set trace options to apply to entered groups or to exclude entered groups. You can enter groups to which to apply trace option settings or you can enter groups to exclude from trace option settings.

  user@host # set security traceoptions apply-groups <value>

  user@host # set security traceoptions apply-groups-except <value>