Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] [STRM] How to disable Log Source Autodiscovery



Article ID: KB17633 KB Last Updated: 18 Sep 2019Version: 3.0
By default when STRM receives Syslog messages from a device, it will try to recognize the Device Type and automatically add it as Log Source.  Basically STRM performs autodiscovery of devices that are sending Syslog message (these devices will have Autodiscovered value: true).
This default behaviour is not always desiderable.  In certain occasions it is preferable to add a device manually and disable the autodiscovery capability - as there is a possibility of incorrect Device type detection for example.
Steps to disable Log Source Autodiscovery:
  1. From the Admin Tab, open the Deployment Editor.
  2. Select the Event View tab and double click eventcollecor0::XXXX, then Click Advanced icon.
  3. Change: Autodetection Enabled from True to False and click Save (as shown in the picture below).
  4. From Deploymenet Editor Menu select: Save and Close.
  5. From the Admin Tab, click Deploy Changes.
Modification History:
2019-09-18: Archived article. The workflow (deployment editor) is obsolete.  
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search