Saving Security Logs Into The Security Log File - H3C S3100V2-52TP Configuration Manual

CAUTION:
Because the default system configurations for different channels are different, you need to first disable the
output of log, trap, and debugging information of all modules on the specified channel (console in this
example). Then configure the output rule as needed so that unnecessary information will not be output.
# Configure the information output rule. Allow log information of ARP and IP modules with severity equal
to or more severe than informational to be output to the console. (The source modules that are allowed
to output information depend on the switch model.)
[Sysname] info-center source arp channel console log level informational state on
[Sysname] info-center source ip channel console log level informational state on
[Sysname] quit
# Enable the display of log information on a terminal. (optional, this function is enabled by default.)
<Sysname> terminal monitor
Info: Current terminal monitor is on.
<Sysname> terminal logging
Info: Current terminal logging is on.
After the above configuration takes effect, if the specified module generates log information, the
information center automatically sends the log information to the console, which displays the
information.

Saving security logs into the security log file

Network requirements
As shown in
status of the device, you need to make sure of the following:
Save security logs into the security log file Flash:/securitylog/seclog.log at a frequency of one hour.
•
Only the security log administrator can view the contents of the security log file. All other logged-in
•
users cannot view, copy and rename the security log file.
Figure 21 Network diagram
Configuration considerations
The configuration in this example includes two parts:
Figure 21, to efficiently and conveniently view the security events and understand the security
56