Configuration Library
Configuration Library

ScreenOS Configure Logging to USB Device

[ Edited ]
‎11-27-2010 11:19 AM

Product: ScreenOS
Version: 4.0 and higher


Network Topology:
Not Applicable


Description:
 The built in flash on the firewalls have limited storage for log files.  These are automatically over written as space runs out on the device.  Adding a USB drive stick can increase the amount of log space available on the firewall.


Configuration:
1. Confirm that usb has the logging levels turned on.  Log into the cli and check the current setting.  This should be the default.

systemname-> get log setting
Levels: 0=Emergency, 1=Alert, 2=Critical, 3=Error, 4=Warning, 5=Notification,
        6=Information, 7=Debugging, '-' = disabled
Module     Console    Internal   Email      SNMP       Syslog     
system     --------   01234567   012--5--   012-----   01234567   

Module     WebTrends  NSM        USB     
system     012--5--   01234567   01234567   

Serial number is disabled.
------------

You should see the logging level under USB at 7 and below.  If this is not turned on you can set the USB logging level.

systemname-> set log module system level information destination usb

Other levels available are:
emergency,alert,critical,error,warning,notification,information,debugging

2. Enable the logging to the USB device.

systemname-> set log usb enable

This allows the usb stick to be used to the maximum available space.  It creates a text file on the drive in the format:

systemname_24Sept2010_log.txt

3. To restrict the size of the log file.

systemname-> set log usb filesize ## (number of megabytes)
 
Verification:
Viewing the logs
These logs are visible in the web and cli interface while they are gathered.  To remove the device for review on you computer.

CLI
get log traffic ?
View and select your options

 

get log event ?

View and select your options

Web
Reports - System Log - Events
Reports - Policies (select policy log to view)


USB Drive on your Computer
To remove the USB drive and mount on your computer for review.

systemname-> unset log usb enable
systemname-> exec usb-device stop  

References:
KB4258 Storing Log Data
http://kb.juniper.net/InfoCenter/index?page=content&id=KB4258


KB4214 Configuring the Juniper Firewall Traffic Log (Policy Log)
http://kb.juniper.net/InfoCenter/index?page=content&id=KB4214

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
3 REPLIES 3
Configuration Library

Re: ScreenOS Configure Logging to USB Device

‎06-05-2012 06:14 AM

I do have a syslog server setup already, so this will actually be a breeze. Many thanks folks.

 

Configuration Library

HIRe: ScreenOS Configure Logging to USB Device

[ Edited ]
‎12-18-2012 09:43 PM

Hi,

 

can you guide me to send the log (/var/log) files to USB drive automatically in Junos platform please?

Configuration Library

Re: HIRe: ScreenOS Configure Logging to USB Device

‎12-22-2012 05:21 AM

Unfortunately, you cannot redirect the log location in Junos.  The best you can do is copy them off the device to usb.  See kb 16240

 

Copy logs to usb

http://kb.juniper.net/InfoCenter/index?page=content&id=KB16240

 

Logging setup on SRX

http://kb.juniper.net/InfoCenter/index?page=content&id=KB16634

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home