SRX

Hello,

I'm not able to see logs in my J-web even though I configured event mode and a file, I'm seeing the image I attached it the J-Web and below is my configuration

root@SRX-1# show security

log {

mode event;

}

root# show system syslog

archive size 100k files 3;

user * {

any emergency;

}

file messages {

any notice;

authorization info;

}

file interactive-commands {

interactive-commands any;

}

file traffic-log {

any any;

}

Did anybody face this issue and resolved or i'm missing any configuration?

thanks

Does the jweb show the correct cli configuration you have in event mode?

It looks like jweb sees the device in stream.

unfortunately no, I configured event mode via CLI and the jweb is not reflecting this.

Seems like a bug.

Can you navigate in jweb to the configure section and toggle it there to get the web interface in sync?

I found the problem, Juniper changed the local logging to be used in stream mode instead of event mode after 15.1X49-D100. This is stated in this KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB32479&pmv=print&actp=METADATA&searchid=&type=currentpaging 

i was enabling event mode and expecting it to do local logging. I will make it stream mode according to the KB

thanks