close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

report (Security Log)

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
report {
    logs-per-table {
        idp log-number;
        ipsec-vpn log-number;
        screen log-number;
        session-all log-number;
        sky log-number;
        utm log-number;
    }
    table-lifetime table-lifetime;
}
    table-mode {
        dense;
    }

Syntax (SRX4600)

content_copy zoom_out_map
report {
    database-capacity {
        max-db-size;
    }
    database-filter {
        event-category;
        exclude;
    }
    log-share-per-table {
        atp log-share;
        dns log-share;
        idp log-share;
        ipsec-vpn log-share;
        screen log-share;
        session-all log-share;
        utm log-share;
    }
    logs-per-table {
        idp log-number;
        ipsec-vpn log-number;
        screen log-number;
        session-all log-number;
        sky log-number;
        utm log-number;
    }
    table-lifetime table-lifetime;
    }
    table-mode {
        dense;
        disable-dense;
    }
}

Hierarchy Level

[edit security log]
[edit logical-systems name security log]
[edit tenants tenant-name security log]

Description

Set security log report settings.

On-box reporting offers a comprehensive reporting facility where your security management team can spot a security event when it occurs, immediately access and review pertinent details about the event, and quickly decide appropriate remedial action.

The on-box reporting feature is enabled by default on a SRX Series Firewall with Junos OS Release 15.1X49-D100 or later.

If you are upgrading your SRX Series Firewall from a Junos OS Release prior to Junos OS 15.1X49-D100, then on-box reporting feature is disabled by default. You need to run the set security log report command to enable the on-box reporting feature on the device.

Options

report	Enable log report.
logs-per-table	Log number for each table.
idp	Log number of idp. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
ipsec-vpn	Log number of IPsec-VPN. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 26666 through 26666 Default: 26666 Range: For SRX1500, SRX4100, and SRX4200: 333333 through 333333 Default: 333333 Range: For SRX4600: 666666 through 666666 Default: 666666
screen	Log number of screen. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
session-all	Log number of session. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 80000 through 800000 Default: 80000 Range: For SRX1500: 533333 through 5333333 Default: 533333 Range: For SRX4100 and SRX4200: 666666 through 6666666 Default: 666666 Range: For SRX4600: 1000000 through 10000000 Default: 1000000
sky	Log number of SKY. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
Content Security	Log number of Content Security. Range: For SRX300, SRX320, SRX340, SRX345, SRX550, SRX550M, and vSRX Virtual Firewall: 40000 through 80000 Default: 40000 Range: For SRX1500, SRX4100, and SRX4200: 500000 through 1000000 Default: 500000 Range: For SRX4600: 1333333 through 2666666 Default: 1333333
table-lifetime	Table lifetime days. Default: 90 Range: 0 through 365
table-mode	Report table mode. `dense`- Enable table dense mode. `disable-dense`- Disable table dense mode.

Required Privilege Level

The remaining statements are explained separately. See CLI Explorer.

Release Information

Statement introduced in Junos OS Release 15.1X49-D100

The [edit logical-systems name security log] and [edit tenants tenant-name security log] hierarchy levels introduced in Junos OS Release 19.1R1.

table-mode option added in Junos OS Release 19.4R1.

arrow_backward PREVIOUS report-resource-allocation (PCRF Partition)

NEXT arrow_forward report-skip

Junos CLI Reference

ON THIS PAGE

report (Security Log)

Syntax

Syntax (SRX4600)

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

report (Security Log)

Syntax

Syntax (SRX4600)

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch