Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Policy logging to USB

     
    Posted 11-27-2010 06:14
    Hi all, I'm running a SSG5 with firmware 6.2.0r8. I have logging enabled on some of the policy's, but because of the limited memory size messages get lost. Is it possible to use an USB flash drive for logging? And how do I set this up? Thanks!


  • 2.  RE: Policy logging to USB
    Best Answer

    Posted 11-27-2010 10:53

    Yes, you can use USB storage to increase the log sizes available.

    1. Confirm that usb has the logging levels turned on.  Log into the cli and check the current setting.  This should be the default.

    systemname-> get log setting
    Levels: 0=Emergency, 1=Alert, 2=Critical, 3=Error, 4=Warning, 5=Notification,
            6=Information, 7=Debugging, '-' = disabled
    Module     Console    Internal   Email      SNMP       Syslog     
    system     --------   01234567   012--5--   012-----   01234567   

    Module     WebTrends  NSM        USB     
    system     012--5--   01234567   01234567   

    Serial number is disabled.
    ------------

    You should see the logging level under USB at 7 and below.  If this is not turned on you can set the USB logging level.

    systemname-> set log module system level information destination usb

    Other levels available are:
    emergency,alert,critical,error,warning,notification,information,debugging

    2. Enable the logging to the USB device.

    systemname-> set log usb enable

    This allows the usb stick to be used to the maximum available space.  It creates a text file on the drive in the format:

    systemname_24Sept2010_log.txt

    3. To restrict the size of the log file.

    systemname-> set log usb filesize ## (number of megabytes)

    4. Viewing the logs
    These logs are visible in the web and cli interface while they are gathered.  To remove the device for review on you computer.

    systemname-> unset log usb enable
    systemname-> exec usb-device stop



  • 3.  RE: Policy logging to USB

     
    Posted 11-27-2010 12:11
    Works perfectly! Thanks Steven


  • 4.  RE: Policy logging to USB

    Posted 09-28-2011 02:23

    Hi @ all

     

    I'm using a SSG5 too (Firmware: 6.1.0r2.0 (Firewall+VPN))

     

    I am not firm with CLI. Config over GUI (Firefox). I had the same Problem.

    Policy Trust-to-Untrust is Loggt but afer 30 minutes the "old" entrys are going to Nirvana... just kidding.

     

    So, i want to use a USB-Flash-Drive or a external HDD (if it's possible) at the USB-Port.

     

    How can i configure this by using the GUI? Possible? Or have i had to get familiar with the CLI?

     

    Instructions in German would be great!

     

    Thank's anyway