Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[JSA] How to reduce the number of system notification messages displayed

0

0

Article ID: KB14104 KB Last Updated: 14 Dec 2020Version: 2.0
Summary:

Starting with JSA 7.3 version and later, the JSA UI shows system notification messages, which are basically the same as the logs in /var/log/qradar.log. These are shown in the UI for information and troubleshooting purposes.

However, sometimes these system logs can get overwhelming and we may need to reduce the number of events reported in Event Viewer. This article shows how this is done.

 

Symptoms:

I want to reduce the number of system notifications displayed in Event Viewer.

 

Solution:

System Notifications are shown in the Event Viewer based on the "System Notification" rule. This rule can be modified as required to reduce the number of messages displayed in the Event Viewer.

Perform the following steps to tune the "system notification" rule.

  1. Log in to JSA by using the WebUI.

  2. Go to the Offense tab > Rules.

  3. Select the rule "System: Notification" and edit it (double-click to open the rule).

  1. Make necessary changes to the rule. For example, the following settings will limit the system notification to 3 messages per hour:

  1. Click Finish to save the rule.

 

Modification History:

2020-12-14: Modified article to use images from JSA 7.3 along with relevant instructions.

 

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search