Description

Which category under security logging is used for RT_FLOW logs?

Solution

To send RT_FLOW logs to a syslog server on SRX devices, you need to configure the correct log stream category under the security log configuration. The category associated with flow logs RT_FLOW is flow.

 

root@srx# set security log stream Server_Logs category ?

Possible completions:

all         All events are logged

content-security   Content security events are logged

fw-auth       Fw-auth events are logged

screen        Screen events are logged

alg         Alg events are logged

nat         Nat events are logged    

flow         Flow events are logged     >>>>>>>>>

sctp         Sctp events are logged

gtp         Gtp events are logged

ipsec        Ipsec events are logged

idp         Idp events are logged

rtlog        Rtlog events are logged

pst-ds-lite     Pst-ds-lite events are logged

appqos        Appqos events are logged

secintel       Secintel events are logged

aamw         AAMW events are logged

dnsf         DNSF

dns         DNS

[edit]

Modification History

2025-01-24 : Article Created