Managing Security Logs; Saving Security Logs To The Security Log File - H3C SR6600-X Configuration Manual

Step
5. (Optional.) Configure the
maximum size for a log file.
6. (Optional.) Specify the
directory to save a log file.
7. Save the logs in the log file
buffer to a log file.

Managing security logs

Security logs are very important for locating and troubleshooting network problems. Generally, security
logs are output together with other logs. It is difficult to identify security logs among all logs.
To solve this problem, you can save security logs to the security log file without affecting the current log
output rules.

Saving security logs to the security log file

After you enable the saving of the security logs to the security log file:
The system first outputs security logs to the security log file buffer.
•
The system saves the logs from the security log file buffer to the security log file at intervals (the
•
security log administrator can also manually save security logs to the log file).
After the security logs are saved, the buffer is cleared immediately.
•
The device supports only one security log file. To avoid security log loss, you can set an alarm threshold
for the security log file usage. When the alarm threshold is reached, the system outputs a message to
inform the administrator. The administrator can log in to the device as the security log administrator and
back up the security log file to prevent the loss of important data.
To save security logs to the security log file:
Command
info-center logfile size-quota size
info-center logfile directory
dir-name
•
Configure the interval to
perform the save operation:
info-center logfile frequency
freq-sec
•
Manually save the logs in the
log file buffer to a log file:
logfile save
250
Remarks
By default, the maximum size of a
log file is 2 MB.
To ensure normal operation, set the
size argument to a value between
1 MB and 10 MB.
By default, log files are saved in the
logfile directory under the root
directory of the storage device.
This command cannot survive a
reboot or an active/standby
switchover. (In standalone mode.)
This command cannot survive an
IRF reboot or a global
active/standby switchover in an
IRF fabric. (In IRF mode.)
The default saving interval is
86400 seconds.
The logfile save command is
available in any view.