Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 832 / 1016

•
Clear Filter —Removes the filter for the selected column.
•
Clear All Filters —Removes the filter for all columns.
• Single or multiple value column filter— To create a filter based on a column field for
the Admin Name, Admin Login Domain, Working Domain, Command, Authorization
Status, Targets, Devices, or Miscellaneous column, right-click a field in the column and
select
Filter . The following filter menu options are displayed:
• Only This Value —Displays only the content in the selected row cell.
•
Not This Value —Displays everything except the content in the selected row cell.
•
Clear Filter —Removes a current filter on the selected column.
• Clear All Filters —Removes all filters for all columns.
Log Size and Data Migration
When the disk space usage reaches the defined threshold, the oldest audit log entries
are purged before new entries are recorded. Configure the threshold in the
guiSvr.cfg
file.
You can migrate old audit log data into the latest version of the audit log.
Target View and Device View
The Audit Log Viewer also contains two detail views:
•
Target View —For a change made to the device configuration, such as changing an IP
address or renaming the device, select the audit log entry for that change in the Audit
Log table, then view the Target View to see details about that change.
•
Device View —For a change made to the device itself, such as adding the device,
autodetecting a device, or rebooting a device, select the audit log entry for that change
in the Audit Log table, then view the Device View to see details about that change.
To see additional details for an target or device audit log entry, double-click the entry in
the Target View or Device View. For targets, NSM displays the configuration screen that
the change was made in and marks the changed field with a solid green triangle. For
devices, NSM displays the
Job Manager information window for the job task.
Setting a Start Time for Audit Log Entries
By default, the Audit Log Viewer displays audit log entries in order of time generated by
Greenwich Mean Time (GMT). To configure the Audit Log Viewer to display log entries
for events that occurred after a specific time, configure the
Log By Time option.
From the View menu , select Go To Log By Time to display the Log By Time dialog box.
Select a date and time, then click OK to save and apply the time change to the Audit Log
Viewer. The Audit Log table now displays only the audit log entries that were generated
on or after the date and time you specified.
Managing Log Volume
Security administrators have different requirements for the number of log entries they
need to retain. As directed by their corporate security policy, some administrators must
Copyright © 2010, Juniper Networks, Inc. 782
Network and Security Manager Administration Guide