Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Security log stream not working to Security Director

$
0
0

Hey guys,

 

I am trying to utilize the security log stream functionality on an SRX220 branch device. Here is my config:

 

root@SC-SRX220# show security log
mode stream;
source-address 10.6.255.1;
stream STREAM-SC-SRX220 {
    severity info;
    format sd-syslog;
    category all;
    host {
        192.168.21.58;
        port 514;
    }
}

root@SC-SRX220# show security policies from-zone ZONE-TRUST to-zone ZONE-UNTRUST
policy SECPOL-ALLOW-ALL {
    match {
        source-address any;
        destination-address any;
        application any;
    }
    then {
        permit;
        log {
            session-init;
            session-close;
        }
        count;
    }
}


root@SC-SRX220# show interfaces vlan.255
description "VLAN-INFRAMGMT L3 interface";
family inet {
address 10.6.255.1/24;
}

The logs are getting to the Log Collector (192.168.21.58) but Security Director is not displaying any of the logs. What am I missing here?


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>