SRX

 View Only
last person joined: 16 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  How to see JWeb Monitor/Logs/Session via CLI?

    Posted 11-15-2022 13:03

    Dear all,
    on a SRX4100 we use security log stream mode and report to enable viewing logged session-init and session-close in the Jweb via Monitor/Logs/Session.
    However, this is terribly slow updating and the filters does not seem to work correctly.

    Are there CLI equivalents to show those logs (and with faster filtering)?

    I already tried "show security log query category all" but this does not seem to be the equivalent to JWeb Monitor/Logs/Session.

    Best regards
    Stefan



  • 2.  RE: How to see JWeb Monitor/Logs/Session via CLI?

    Posted 11-18-2022 06:03
    Update:
    I found a solution meanwhile.

    > show configuration security log

    mode stream;

    format syslog;

    report;

    stream TRAFFIC-LOG {

        file {

            name traffic-log;

            size 50;

            rotation 19;

        }

    }

    Now I can fairly fast search for sessions using "show security log stream file traffic-log | match <some criteria>"

    Best regards
    Stefan