Log Categories; System Maintenance; User Activity; Dropped Icmp - SonicWALL TELE3 SP Administrator's Manual

10. Syslog Individual Event Rate (seconds/event) - The Syslog Individual Event
Rate setting filters repetitive messages from being written to Syslog. If duplicate events
occur during the period specified in the Syslog Individual Event Rate field, they are not
written to Syslog as unique events. Instead, the additional events are counted, and then
at the end of the period, a message is written to the Syslog that includes the number of
times the event occurred.
The Syslog Individual Event Rate default value is 60 seconds and the maximum value
is 86,400 seconds (24 hours). Setting this value to 0 seconds sends all Syslog messages
without filtering.
11. Syslog Format - You can choose the format of the Syslog to be Default or WebTrends.
If you select WebTrends, however, you must have WebTrends software installed on your
system.

Log Categories

You can define which log messages appear in the SonicWALL Event Log. All Log Categories
are enabled by default except Network Debug.
•

System Maintenance

Logs general system activity, such as administrator log ins, automatic downloads of the
Content Filter Lists, and system activations.
• System Errors
Logs problems with DNS, e-mail, and automatic downloads of the Content Filter List.
• Blocked Web Sites
Logs Web sites or newsgroups blocked by the Content Filter List or by customized filtering.
• Blocked Java, ActiveX, and Cookies
Logs Java, ActiveX, and Cookies blocked by the SonicWALL.
•

User Activity

Logs successful and unsuccessful log in attempts.
• Attacks
Logs messages showing Denial of Service attacks, such as SYN Flood, Ping of Death, and
IP spoofing.
• Dropped TCP
Logs blocked incoming TCP connections.
• Dropped UDP
Logs blocked incoming UDP packets.
•

Dropped ICMP

Logs blocked incoming ICMP packets.
Page 32 SonicWALL TELE3 SP Administrator's Guide