JunOS: Forward all but Traffic Logs to Syslog Server

[alex2308cc]

Hi,

I'd like to know how to configure Log forwarding on the JunOS device to forward all but Traffic logs. This is what my config looks like:

set system syslog host 192.168.2.21 any any
set system syslog host 192.168.2.21 facility-override authorization
[edit system syslog host 192.168.2.21]

with 192.168.2.21 beeing my Syslog Server obviously.

How do you do this in JunOS? 

[syednasirraza]

hi alex...

if you are asking how to code for loging some info from your device on your remote server, have not you replied it yourself.... i mean this is how it is::

set system syslog host <ip-address> <faclity> <severity level>

faclity -> u have to decide yourself like authorization, interactive comands, change-log or any

severity-> again u have to decide like info, error, any

(Although any any will generate too much of logs, so its better to be specific)....

So isnt it what u askd and replied??? or am i mistaken to get your question????

[alex2308cc]

I'd like to log everything except traffic logs. Thats not so hard to understand, is it? 

[Ulf · Accepted solution]

Hi,

does either of these help:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB22588

http://kb.juniper.net/InfoCenter/index?page=content&id=KB22177

Best Regards

Ulf

[alex2308cc]

That worked, thanks Ulf!

(You really need the quotes in the match statement! My mistake trying to make a filter without the quotes ", it will end up in a filter called match "!", which is senseless) 

[alex2308cc]

to finalize it, filter for "RT_FLOW_SESSION" which is the keyword for traffic