Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Configuring Local System Logging for Next Gen Services

date_range 06-Dec-23

You must enable global system logging for Next Gen Services in order to perform event mode system logging. See, Enabling Global System Logging for Next Gen Services.

To send Next Gen Services log messages to a file on the local router, you’ll need to configure system logging for event mode. This procedure describes this configuration process.

Note:

For Next Gen Services, syslogs are always set at the service-set level. You must perform this procedure for each service-set for which you want to collect logs.

To configure event mode logging for Next Gen Services:

  1. Specify the filename to send log messages to.
    content_copy zoom_out_map
    user@host# set system syslog file filename
    
  2. Specify the name of the service-set for which you want to log messages.
    content_copy zoom_out_map
    user@host# edit services service-set service-set-name syslog
    

    For example specify the service-set name to ss1.

    content_copy zoom_out_map
    user@host# edit services service-set ss1 syslog
    
  3. Specify the security transport protocol for syslog messages.
    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set transport protocol tls | tcp | udp
    
  4. Enable event mode system logging for the service-set.
    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set mode event
    
  5. Specify the rate at which log messages are sent per second.
    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set event-rate 100
    
  6. Specify a local tag name for the log messages.
    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set local-log-tag SYSLOG
    
  7. Specify the categories for which you want to collect events.
    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set local-category category, category
    

    For example, to collect logs for stateful firewall, sessions and NAT:

    content_copy zoom_out_map
    [edit services service-set ss1 syslog]
    user@host# set local-category sfw, session, nat
    
footer-navigation