SRX

Expand all | Collapse all

SRX logs are not showing locally in the monitoring

Jump to Best Answer
  • 1.  SRX logs are not showing locally in the monitoring

    Posted 06-24-2020 13:34

    Hello,

     

    I'm not able to see logs in my J-web even though I configured event mode and a file, I'm seeing the image I attached it the J-Web and below is my configuration

     

    root@SRX-1# show security

    log {

    mode event;

    }

     

     

    root# show system syslog

    archive size 100k files 3;

    user * {

    any emergency;

    }

    file messages {

    any notice;

    authorization info;

    }

    file interactive-commands {

    interactive-commands any;

    }

    file traffic-log {

    any any;

    }

     

    Did anybody face this issue and resolved or i'm missing any configuration?

     

    thanks2020-06-24_184411.png


    #SRX
    #j-web
    #jweb
    #monitoring


  • 2.  RE: SRX logs are not showing locally in the monitoring

     
    Posted 06-24-2020 14:51

    Does the jweb show the correct cli configuration you have in event mode?

    It looks like jweb sees the device in stream.

     



  • 3.  RE: SRX logs are not showing locally in the monitoring

    Posted 06-24-2020 14:57

    unfortunately no, I configured event mode via CLI and the jweb is not reflecting this.



  • 4.  RE: SRX logs are not showing locally in the monitoring

     
    Posted 06-24-2020 15:04

    Seems like a bug.

     

    Can you navigate in jweb to the configure section and toggle it there to get the web interface in sync?

     



  • 5.  RE: SRX logs are not showing locally in the monitoring
    Best Answer

    Posted 06-24-2020 15:10

    I found the problem, Juniper changed the local logging to be used in stream mode instead of event mode after 15.1X49-D100. This is stated in this KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB32479&pmv=print&actp=METADATA&searchid=&type=currentpaging 

     

    i was enabling event mode and expecting it to do local logging. I will make it stream mode according to the KB

     

    thanks