Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 846 / 1026

where
YYYYMMDD
is the date of the file containing the log and
No
is the archive number
if multiple archivals exist for the same date.
NOTE: If the archive process fails; for instance, if the host is not preconfigured,
or if there is not enough disk space, the user is notified via e-mail, and NSM
creates an error log entry. However, the selected logs are purged even if
archival fails.
Define Location
Before you archive a log, you must first define a location for the archived logs. To do this,
open NSM and select
Server Manager > Servers > Device Server > Disk and Log
management . Enter the path in the Archive Location text box indicating where you want
NSM to store the archived files.
Forwarding Logs
You can forward your log records for use in other applications using one of the following
methods:
•
Action Manager—Use the Action Manager, a node on the main UI, to configure the
management system to forward logs generated within a specific domain or subdomain
in NSM.
•
log2Action utility—A command-line utility located on the NSM Device Server.
NOTE: You can also forward logs based on specific rules in a security policy.
See “Configuring Firewall Rules” on page 448 for more information.
Sending E-mail Notification of Downed Device
You can configure NSM to send you an e-mail notification when a device goes down so
that even if you do not have access to NSM, you will be informed of device status.
1.
In the main navigation tree, select Action Manager > Action Parameters , then
double-click the row that lists all your action parameters.
2.
Enter the default e-mail address in the EMail section for the ‘From’ e-mail address.
3.
Click the Add icon to open the New Add/Edit EMail Address dialog box.
4.
Enter the default ‘To’ e-mail address for all log actions in the current domain, then
click
OK . Repeat this step if additional default ‘To’ e-mail addresses are required.
5.
In the main navigation tree, click Action Manager > Device Log Action Criteria , then
click the Add icon.
6.
Click the Category drop-down list box and select Info, select the Device Disconnnect
subcategory, then click OK to save the changes.
Copyright © 2010, Juniper Networks, Inc. 796
Network and Security Manager Administration Guide