close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

log (Logical Systems and Tenant Systems)

date_range 09-Dec-23

arrow_backward

arrow_forward

Syntax

        log {
            disable;
            facility-override (authorization | daemon | ftp | kernel | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7 | user);
            mode (event | stream);
            format (binary | sd-syslog | syslog);
            source-address;
            source-interface;
            stream name {
                category name;
                filter name;
                host {
                    ipaddr;
                    port port;
                    routing-instance routing-instance;
                }
                rate-limit rate;
            }
            transport {
                protocol (tcp | tls |udp);
                tls-profile;
            }
        }
    }

Hierarchy Level

content_copy zoom_out_map
[edit logical-systems name security]
[edit tenants name security]

Description

Configure security log for logical systems and tenant systems. Set the mode of logging (event for traditional system logging or stream for streaming security logs through a revenue port to a server). You can also specify all the other parameters for security logging.

Options

`disable`	Disable the security logging for the device.
`facility-override`	Alternate facility for logging to remote host. Values: `authorization` —Authorization system `daemon` —Various system processes `ftp` —FTP process `kernel` —Kernel `local0` —Local logging option number 0 `local1` —Local logging option number 1 `local2` —Local logging option number 2 `local3` —Local logging option number 3 `local4` —Local logging option number 4 `local5` —Local logging option number 5 `local6` —Local logging option number 6 `local7` —Local logging option number 7 `user` —User processes
`format`	Set security log format for the device. Values: `binary` —Binary log `binarysd-syslog` —Structured syslog `syslog` —Traditional syslog
`mode`	Controls how security logs are processed and exported. Values: `event` —Process security logs in the control plane `stream` —Process security logs directly in the forwarding plane
`source-address`	Specify a source IP address or IP address used when exporting security logs, which is mandatory to configure `stream host`.
`source-interface`	Specify a source interface name, which is mandatory to configure `stream host`.
`stream`	Set security log stream settings.
`transport`	Set security log transport settings. Values: tcp—TCP transfer for log tls—TLS transfer for log udp—UDP transfer for log
`utc-timestamp`	Specify to use UTC time for security log timestamps.

The following options are not supported under logical system and tenant system:

event-rate and rate-cap— Use to limit the log rate between Packet Forwarding Engine (PFE) and Routing Engine (RE).
file— Use to store binary log with event mode.
max-database-record and report— Use to enable SQLite Version 3 (sqlite3) database for local log management daemon (llmd).
traceoptions— Specify security log daemon trace options.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 18.2R1.

Statement introduced in Junos OS Release 18.3R1 for tenant systems.

The routing-instance option introduced in Junos OS Release 18.3R1 for tenant systems.

arrow_backward PREVIOUS log-interval (Protocols MSDP)

NEXT arrow_forward log-prefix (Interfaces)

Junos CLI Reference

ON THIS PAGE

log (Logical Systems and Tenant Systems)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

log (Logical Systems and Tenant Systems)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch