Screen OS

Hi,

    I would like to know on how to configure the Policies Log report which are recycled at timing which I do not know.

    The old log messages in the Policies Log are cleared (FIFO?) when new messages are generated.

    Eg. Technics on how to configure : if possible the Page Size or Timing (day, weeks,,,) of the Policies Log.

    I had surf the Internet but unfortunately not able to find anything related to the above context.

Thank you.

Hi,

You are right, policy logs are purged in a FIFO fashion and I am afraid you cannot configure a purge interval.

If you are looking to retain historic logs, a better approach would be to forward them to a syslog server.

Thank you, Gokul-san.

    I appreciated your fast response very much.

    By the way, any examples or references available of forwarding to a syslog server which I can refer to?

Thank you.

You are welcome 

Please follow http://kb.juniper.net/InfoCenter/index?page=content&id=KB4759 to setup syslog on the firewall. The area where it says 'Traffic Log: Select this option to send traffic log entries to the syslog host' is what you are looking for.

When Traffic Log is enabled, policy logs will be forwarded to syslog. Also ensure that you enable logging in the policies you are interested to watch.

Hi Gokul-san,

     Thank you so much for your link.

      I am now able to forward the Policies Log to a separate Syslog  and the messages are

      coming into the Syslog well.

      Thank you again.

That is good news my friend, glad that I could help