This article explains the process to send the traffic logs or security logs to external server if SRX is managed by MIST.

For a MIST managed SRX, below is the sample configuration to be applied to send the logs to external server and have to be configured using the 'Additional CLI commands' section on the MIST portal.

set security log mode stream

set security log format sd-syslog

set security log source-address <ip>

set security log stream logs severity info

set security log stream logs format sd-syslog

set security log stream logs category all

set security log stream logs host <ip> -----> External server IP

set security log stream logs host port <port> -----> Specify the port to send the logs to server eg:- 514.

Configure session-close to respective policies, which are required to be logged.