Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 855 / 1026

The Device Server exports all log records to the specified SNMP community and server.
Using SNMP Required and Optional Format-Specific Filters
You can use the following required format-specific filters for exporting to SNMP:
Meaning Required Multiple SNMP
Specify SNMP community string. The
community is an arbitrary string that the SNMP
server is configured to recognize. For details on
the community parameter, refer to section 3.2.5
of RFC 1098.
You might need to ask your SNMP server
administrator for the server community string.
Yes No --community
Specify SNMP manager IP address
The value must be encoded as
[IP|FQDN:<port>]
Yes No --server
The SNMP format has no optional format-specific filters.
Viewing SNMP Format Output
SNMP trap log entries use the following format:
<day id> <record id> <time received> <time generated> <device domain> <device
domain version> <device> <device ip> <category> <subcategory> <source zone> <source
interface> <source ip> <source port> <nat src ip> <nat src port> <destination
zone> <destination interface> <destination ip> <destination port> <nat dst ip>
<nat dst port> <protocol> <rule domain> <rule domain version> <policy> <rulebase>
<rulenumber> <action> <severity> <isalert> <details> <user str> <application
str> <uri str> <elapsed secs> <bytes in> <bytes out> <bytes total> <packets in>
<packets out> <packets total> <repeat count> <has packet data> <var data enum>
<application name> <device family> <policy id> <var data>
To send log records to the public SNMP server at 192.168.1.15, use the --public and --server
options:
sh devSvrCli.sh --log2action --action --snmp --community public --server 192.168.1.15
Exporting to E-mail
The e-mail action directs the system to output logs for an e-mail address in SMTP format.
You must specify the recipient’s e-mail address the exported log records, andand you
have the option of specifying the sender's email address.
To export:
1.
Login to the Device Server as root, then change to the utility directory by typing: cd
/usr/netscreen/DevSvr/utils .
2.
To export to a file, type:
sh devSvrCli.sh --log2action --action --email <sender> <recipient>
805 Copyright © 2010, Juniper Networks, Inc.
Chapter 19: Logging