{"id":244,"date":"2017-08-13T16:53:45","date_gmt":"2017-08-13T20:53:45","guid":{"rendered":"http:\/\/puluka.com\/home\/?p=244"},"modified":"2017-08-13T16:53:45","modified_gmt":"2017-08-13T20:53:45","slug":"screenos-configure-logging-to-usb-device","status":"publish","type":"post","link":"http:\/\/puluka.com\/home\/networking\/screenos\/screenos-configure-logging-to-usb-device\/","title":{"rendered":"ScreenOS Configure Logging to USB Device"},"content":{"rendered":"

Product<\/strong>: ScreenOS
\nVersion<\/strong>: 4.0 and higher<\/p>\n

Description:<\/h2>\n

The built in flash on the firewalls have limited storage for log files. These are automatically over written as space runs out on the device. Adding a USB drive stick can increase the amount of log space available on the firewall.<\/p>\n

Configuration:<\/h2>\n

1. Confirm that usb has the logging levels turned on. Log into the cli and check the current setting. This should be the default.<\/p>\n

systemname-> get log setting
\nLevels: 0=Emergency, 1=Alert, 2=Critical, 3=Error, 4=Warning, 5=Notification,
\n6=Information, 7=Debugging, ‘-‘ = disabled
\nModule Console Internal Email SNMP Syslog
\nsystem ——– 01234567 012–5– 012—– 01234567
\nModule WebTrends NSM USB
\nsystem 012–5– 01234567 01234567
\nSerial number is disabled.
\n————<\/p>\n

You should see the logging level under USB at 7 and below. If this is not turned on you can set the USB logging level.<\/p>\n

systemname-> set log module system level information destination usb
\nOther levels available are:
\nemergency,alert,critical,error,warning,notification,information,debugging<\/p>\n

2. Enable the logging to the USB device.<\/p>\n

systemname-> set log usb enable
\nThis allows the usb stick to be used to the maximum available space. It creates a text file on the drive in the format:
\nsystemname_24Sept2010_log.txt<\/p>\n

3. To restrict the size of the log file.<\/p>\n

systemname-> set log usb filesize ## (number of megabytes)<\/p>\n

Using the Logs:<\/h2>\n

Viewing the logs<\/p>\n

These logs are visible in the web and cli interface while they are gathered. To remove the device for review on you computer.<\/p>\n

CLI<\/strong>
\nget log traffic ?
\nView and select you options<\/p>\n

Web
\nReports – System Log – Events
\nReports – Policies (select policy log to view)<\/p>\n

USB Drive on your Computer
\nTo remove the USB drive and mount on your computer for review.
\nsystemname-> unset log usb enable
\nsystemname-> exec usb-device stop<\/p>\n

References:<\/h2>\n

KB4258 Storing Log Data
\nhttp:\/\/kb.juniper.net\/InfoCenter\/index?page=content&id=KB4258<\/a><\/p>\n

KB4214 Configuring the Juniper Firewall Traffic Log (Policy Log)
\nhttp:\/\/kb.juniper.net\/InfoCenter\/index?page=content&id=KB4214<\/a><\/p>\n

Originally Posted November 27, 2010
\nLast Revised on May 14, 2011<\/p>\n","protected":false},"excerpt":{"rendered":"

Product: ScreenOS Version: 4.0 and higher Description: The built in flash on the firewalls have limited storage for log files. These are automatically over written as space runs out on the device. Adding a USB […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-244","post","type-post","status-publish","format-standard","hentry","category-screenos"],"_links":{"self":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/comments?post=244"}],"version-history":[{"count":1,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/244\/revisions"}],"predecessor-version":[{"id":245,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/244\/revisions\/245"}],"wp:attachment":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/media?parent=244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/categories?post=244"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/tags?post=244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}