SRX

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



Expand all | Collapse all

SRX logs are not showing locally in the monitoring

Jump to Best Answer
  • 1.  SRX logs are not showing locally in the monitoring

    Posted 06-24-2020 13:34

    Hello,

     

    I'm not able to see logs in my J-web even though I configured event mode and a file, I'm seeing the image I attached it the J-Web and below is my configuration

     

    root@SRX-1# show security

    log {

    mode event;

    }

     

     

    root# show system syslog

    archive size 100k files 3;

    user * {

    any emergency;

    }

    file messages {

    any notice;

    authorization info;

    }

    file interactive-commands {

    interactive-commands any;

    }

    file traffic-log {

    any any;

    }

     

    Did anybody face this issue and resolved or i'm missing any configuration?

     

    thanks2020-06-24_184411.png


    #SRX
    #j-web
    #jweb
    #monitoring


  • 2.  RE: SRX logs are not showing locally in the monitoring

     
    Posted 06-24-2020 14:51

    Does the jweb show the correct cli configuration you have in event mode?

    It looks like jweb sees the device in stream.

     



  • 3.  RE: SRX logs are not showing locally in the monitoring

     
    Posted 06-24-2020 15:04

    Seems like a bug.

     

    Can you navigate in jweb to the configure section and toggle it there to get the web interface in sync?

     



  • 4.  RE: SRX logs are not showing locally in the monitoring
    Best Answer

    Posted 06-24-2020 15:10

    I found the problem, Juniper changed the local logging to be used in stream mode instead of event mode after 15.1X49-D100. This is stated in this KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB32479&pmv=print&actp=METADATA&searchid=&type=currentpaging 

     

    i was enabling event mode and expecting it to do local logging. I will make it stream mode according to the KB

     

    thanks

     



  • 5.  RE: SRX logs are not showing locally in the monitoring

    Posted 06-24-2020 14:57

    unfortunately no, I configured event mode via CLI and the jweb is not reflecting this.