SRX

Hi Guys,

I would like to push NAT logs to my syslog server, I set logs type to any, but unfortunetly I can't see anything about NAT on my syslog server.

syslog {
       archive size 100k files 3;
       user * {
           any emergency;
       }
       host 10.0.214.2 {
           any any;
           port 514;
           source-address 10.0.214.1;
       }
       file messages {
           any critical;
           authorization info;
       }
       file interactive-commands {
           interactive-commands error;
       }
   }

NAT logs are not separate but part of the overall policy flow logs.  You need to enable logging on the security policy that will permit the NAT flow.  Then add the flow logs to your syslog feed.  There are slight differences depending on whether your SRX is in event or stream mode for logging.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB16509