Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Introduction
play_arrow Dashboard
- About the Dashboard
play_arrow Monitor
- play_arrow Alerts
- play_arrow Logs
- play_arrow Maps and Charts
- play_arrow Tunnel Status
- play_arrow Service Locations
  - Service Locations Overview
- play_arrow Advanced Threat Prevention
- play_arrow Reports
  - Reports Overview
  - Managing Reports
- play_arrow Report Definitions
- play_arrow Generated Reports
  - Using Reports
- play_arrow ATP Report Definitions
- play_arrow ATP Generated Reports
  - ATP Generated Reports Overview
- play_arrow Secure Edge Reports
  - Secure Edge Reports Overview
play_arrow SRX Device Management
- play_arrow Devices
- play_arrow Device Groups
- play_arrow Preprovision Profiles
- play_arrow Configuration Templates
- play_arrow Images
- play_arrow Security Packages
play_arrow SRX Security Policy
- play_arrow SRX Security Policies
- play_arrow SRX Security Policy Rules
- play_arrow SRX Security Policy Versions
- play_arrow Device View
  - Devices with Security Policies Main Page Fields
play_arrow SRX Security Subsciptions
- play_arrow IPS Profiles
- play_arrow IPS Signatures
- play_arrow Content Security
  - Content Security Overview
  - Configure the Content Security Settings
- play_arrow Content Security Profiles
- play_arrow Web Filtering Profiles
- play_arrow Antivirus Profiles
- play_arrow Antispam Profiles
- play_arrow Content Filtering Profiles
- play_arrow Content Filtering Policies (New)
- play_arrow Decrypt Profiles
- play_arrow SecIntel
  - Security Intelligence Overview
- play_arrow SecIntel Profiles
- play_arrow SecIntel Profile Groups
- play_arrow Anti-Malware
- play_arrow Secure Web Proxy
- play_arrow Flow-Based Antivirus
- play_arrow ICAP Redirect Profile
- play_arrow Metadata Streaming Policy
- play_arrow DNS Filter
play_arrow SRX IPSec VPN
play_arrow SRX NAT
- play_arrow NAT Policies
- play_arrow NAT Pools
- Devices with NAT Policies
play_arrow SRX Identity
play_arrow Secure Edge Service Management
play_arrow Secure Edge Security Policy
play_arrow Secure Edge Security Subscriptions
play_arrow Secure Edge Service Administration
play_arrow Secure Edge Identity
play_arrow Secure Edge CASB and DLP
- About CASB and DLP
play_arrow Shared Services Firewall Policies
- play_arrow Rule Options
- play_arrow Redirect Profiles
play_arrow Shared Services Objects
- play_arrow Addresses
- play_arrow GeoIP
- play_arrow Services
- play_arrow Applications
- play_arrow Schedules
- play_arrow URL Patterns
- play_arrow URL Categories
- play_arrow SSL Initiation Profile
play_arrow Shared Services Advanced Threat Prevention
play_arrow Administration
- play_arrow Subscriptions
- play_arrow Users & Roles
- play_arrow Single Sign-On Configuration
- play_arrow Two-Factor Authentication
- play_arrow Audit Logs
  - Audit Logs Overview
  - Export Audit Logs
- play_arrow Service Updates
  - About the Service Updates Page
- play_arrow Jobs
- play_arrow Data Management
- play_arrow Log Streaming
- play_arrow URL Recategorization
  - URL Recategorization Overview
  - Request URL Recategorization
- play_arrow API Security
- play_arrow Organization
- play_arrow ATP Mapping
- play_arrow ATP Audit Logs
  - ATP Audit Logs Overview
  - Export Audit Logs
- play_arrow ATP Application Tokens

list Table of Contents

English

keyboard_arrow_right

Create and Manage Log Streaming Report Definitions

date_range 17-Feb-25

arrow_backward

arrow_forward

Create a Log Streaming report to view data about the logs streamed to an external SIEM system such as Microsoft Azure.

You can create a report for the current month, previous month, or the entire period of the data transfer. The report contains the log stream name, the type of log forwarded, such as audit log, sessions log, or security events, and the amount of data forwarded to the external SIEM system.

Click Monitor > Reports > Report Definitions.
Click Create, and select Log Streaming Report.
The Create Log Streaming Report Definition page is displayed.

Complete the configuration according to the following guidelines:

Table 1: Log Streaming Report Definition
Settings	Guidelines
General
Report Name	Enter a unique string for the report name containing maximum 64 alphanumeric characters. The name can contain dashes (—).
Description	Enter a description containing maximum 900 characters for the report.
Content
Report Type	Select a report duration. Current Month Usage Last Month Usage Historical Usage—Generate the report for the entire period of data transfer except current month.
Schedule
Report Schedule	Click Add Schedule, and select the type of report schedule. Run now Schedule at a later time
Email Section
Email Recipients	Enable this option to send the report to specific recipients in an email. Recipients—Enter the e‐mail addresses of the recipients. You can search for the e-mail addresses of the users by their first name. You can also enter external email addresses. Subject—Enter the subject for the e‐mail notification. Comments—Enter the comments for the e‐mail notification.

Click OK.
A new log streaming report definition with the defined configurations is created.

Manage Log Streaming Report Definitions

Edit—Select the definition, and then click .
Clone—Select the definition, and then click More > Clone.
Delete—Select the definition, and then click .

arrow_backward PREVIOUS Create and Manage URLs Visited Per User Report Definitions

NEXT arrow_forward Using Report Definitions

footer-navigation