Log Receiver Types - D-Link NetDefendOS User Manual

Network security firewall

Hide thumbs Also See for NetDefendOS:

Table of Contents

By default, NetDefendOS sends any generated messages of level Info and above to any

configured log servers but the level required for sending can be changed by the administrator.

The Debug severity is intended for system troubleshooting only and is not normally used. All

individual log messages with their meaning are described in the separate NetDefendOS Log

Reference Guide.

Event Message Timestamping

When log messages are generated by NetDefendOS for sending to an external log server, they

are always timestamped with the time expressed as UTC/GMT (Greenwich Mean Time). This

makes it possible to compare events from different firewalls in different time zones which are set

with different system times.

The exception to this is log messages which are displayed using the local Memlog feature. These

are always timestamped with the current, local system time.

2.3.3. Log Receiver Types

The event messages generated by NetDefendOS can be sent to various types of log receivers. To

receive messages, it is necessary to configure in NetDefendOS one or more event receivers

objects that specify what events to capture, and where to send them.

NetDefendOS can distribute event messages to different types of receivers and these are

enabled by creating any of the following types of Log Receiver objects.

Memory Log Receiver

NetDefendOS has its own logging mechanism also known as the MemLog. This retains all

event log messages in memory and allows direct viewing of recent log messages through the

Web Interface.

This is enabled by default but can be disabled.

This receiver type is discussed further below in Section 2.3.4, "The Memory Log Receiver

Syslog Receiver

Syslog is the de-facto log message standard for logging events from network devices. If other

network devices are already logging to Syslog servers, using Syslog for NetDefendOS log

messages can simplify overall administration.

This receiver type is discussed further below in Section 2.3.5, "The Syslog Log Receiver".

Mail Alerting

The Mail Altering function allows a number of log messages to be grouped together into a

single email which is then sent to a given email address via a designated SMTP server.

Chapter 2: Management and Maintenance

Show Quick Links

Table of Contents