Log Management

Diagnosis > Log > Management

You can configuration log related settings on this page.

Settings of different log types are described as below:

Event Log

Option Description
Enable

Select the check box to enable the event log function.

Console

Select the check box to send syslog to Console.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.

Terminal

Select the check box to send syslog to the terminal.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.

Cache

Select the check box to send syslog to the cache.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.
  • Max buffer size - The maximum size of the cache. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.
File

Select the check box to send syslog to a file.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.
  • Max file size - Specifies the maximum size of the syslog file. The value range is 4096 to 4294967295 bytes. The default value is 1048576.
  • Redirect log to USB - Select the check box and select a USB drive (USB0 or USB1) from the drop-down list. Type a name for the syslog file into the Name box.

Log server

Select the check box to export event logs to the syslog server.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.

Email address

Select the check box to send event logs to the email.

  • Lowest severity - Specifies the lowest severity level. Logs below the severity level selected here will not be exported.

Network Log

Option Description

Enable

Select the check box to enable network log function.

Console

Select the check box to export network log messages to Console.

Cache

Select the check box to export network logs to cache.

  • Max buffer size - The maximum size of the cache. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.

Log server

Select the check box to export network logs to the syslog server.

Configuration Log

Option Description

Enable

Select the check box to enable configuration log function.

Console

Select the check box to export configuration log messages to Console.

Cache

Select the check box to export configuration logs to cache.

  • Max buffer size - The maximum size of the cache. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.

Log server

Select the check box to export configuration logs to the syslog server.

Session Log

Option Description

Enable

Select the check box to enable session log function.

Record User Name

Select the check box to show user name in the log message.

Cache

Select the check box to export session logs to cache.

  • Max buffer size - The maximum size of the cache. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.

Log Server

Select the check box to export session logs to the syslog server.

  • Syslog Distribution Method - Select Binary Format to have the log messages sent in the binary format. When a large amount of log messages are generated by the device, one single syslog server may fail to handle all the messages. In this case, you can select Binary Format Distributed to distribute the log messages to different syslog servers. Round Robin and Src IP Hash are the distribution method used by the system, and you can choose the one you want by selecting the corresponding radio button.

NAT Log

Option Description

Enable

Select the check box to enable NAT log function.

Cache

Select the check box to export session logs to cache.

  • Max buffer size - The maximum size of the cache. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.

Log Server

Select the check box to export session logs to the syslog server.

  • Syslog Distribution Method - Select Binary Format to have the log messages sent in the binary format. When a large amount of log messages are generated by the device, one single syslog server may fail to handle all the messages. In this case, you can select Binary Format Distributed to distribute the log messages to different syslog servers. Round Robin and Src IP Hash are the distribution method used by the system, and you can choose the one you want by selecting the corresponding radio button.

Security Log

Option Description

Enable

Select this check box to enable security log function.

Terminal

Select the check box to export security logs to the terminal.

Cache

Select the check box to export security logs to cache.

  • Max Buffer Size - The maximum size of the memory buffer. The value range is 4096 to 4294967295 bytes. The default value may vary from different hardware platforms.

File

Select the check box to send syslog to a file.

  • Max File Size - Specifies the maximum size of the syslog file. The value range is 4096 to 4294967295 bytes. The default value is 1048576.
  • Redirect Log to USB - Select the check box and select a USB drive (USB0 or USB1) from the drop-down list. Type a name for the syslog file into the Name box.

Log Server

Select the check box to export security logs to the syslog server.

Email Address

Select the check box to send security logs to the email.

Threat Log

Option Description

Enable

Select this check box to enable threat log function.

Options on the Log Sever dialog are:

Option Description

Hostname

Enter the name or IP of the log server.

Binding

Specifies the source IP sending the log messages to the Syslog server, the virtual router or source interface can be selected.

  • Virtual Router: Select the Virtual Router radio button and then select a virtual router form the Virtual Router drop-down list. If a virtual router is selected, the device will determine the source IP address by searching the reachable routes in the virtual router.
  • Source Interface: Select the Source Interface radio button and then select a source interface from the Source Interface drop-down list. The device will use the IP address of the interface as the source IP to send logs to the syslog server. If management IP address is configured on the interface, the management IP address will be preferred.

Protocol

Specifies the protocol type of the syslog server.

Port

Specifies the port number of the syslog server.

Log Type

Specifies the log types the syslog server will receive.