Hey guys,
I am trying to utilize the security log stream functionality on an SRX220 branch device. Here is my config:
root@SC-SRX220# show security log mode stream; source-address 10.6.255.1; stream STREAM-SC-SRX220 { severity info; format sd-syslog; category all; host { 192.168.21.58; port 514; } } root@SC-SRX220# show security policies from-zone ZONE-TRUST to-zone ZONE-UNTRUST policy SECPOL-ALLOW-ALL { match { source-address any; destination-address any; application any; } then { permit; log { session-init; session-close; } count; } }
root@SC-SRX220# show interfaces vlan.255
description "VLAN-INFRAMGMT L3 interface";
family inet {
address 10.6.255.1/24;
}
The logs are getting to the Log Collector (192.168.21.58) but Security Director is not displaying any of the logs. What am I missing here?