Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Example: How to forward structured, system syslog messages from an SRX device to STRM

0

0

Article ID: KB29539 KB Last Updated: 04 Nov 2014Version: 1.0
Summary:

This article contains a basic example configuration on a SRX to send structured, control plane syslogs to an STRM device.


Symptoms:

Configure system log messages to be sent to an STRM device.


Cause:

Solution:

The following example shows how to configure the SRX to forward all system (control plane) logs to a STRM device (10.10.10.1).

Configuration Example:

  1. Set the syslog host to the IP address of the STRM, and set the log facilities/level to 'any any'.
  2. root@srx# set system syslog host 10.10.10.1 any any
  3. Set the destination-port that the STRM is configured to receive the logs:
  4. root@srx# set system syslog host 10.10.10.1 port 514
  5. Configure the logs as 'structured'. This is required in order for the STRM to be able to recognize the logs.
  6. root@srx# set system syslog host 10.10.10.1 structured-data
To summarize the commands:

set system syslog host 10.10.10.1 any any
set system syslog host 10.10.10.1 port 514
set system syslog host 10.10.10.1 structured-data

Important: 
If you are also configuring traffic logs, it is recommended that you configure traffic logs using stream mode to avoid high CPU on the RE (Routing Engine). For an example of how to send traffic logs from the SRX to STRM, refer to KB16224 - How to forward traffic logs from an SRX device to STRM.

View SRX logs on STRM device:

To view the logs, use a browser and log into the STRM WebUI. Select the 'Log Activity' tab. Then select 'Real Time (streaming)' under the 'Viewing real time flows' pull-down.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search