Logging And Reporting; Configuring Logging; Recording Logs On A Remote Computer; Recording Logs On A Webtrends Server - D-Link Dfl-1000 Manual

Logging and reporting

You can configure the DFL-1000 to record three types of logs:
•
Traffic logs record all traffic that attempts to connect through the DFL-1000
• Event logs record changes to the system configuration
•
Attack logs record attacks intercepted by the IDS
This chapter describes:
•

Configuring logging

• Log message formats
•
Viewing and maintaining logs
Configuring logging
You can configure logging to record logs to one or more of the following locations:
• A computer running a syslog server
•
A computer running a WebTrends firewall reporting server
• The DFL-1000 (if your DFL-1000 contains a hard disk).
You can also configure the kind of information that is logged.
•

Recording logs on a remote computer

•

Recording logs on a WebTrends server

•
Recording logs on the DFL-1000 hard disk
• Selecting what to log
Recording logs on a remote computer
Use the following procedure to configure the DFL-1000 to record logs onto a remote computer. The
remote computer must be configured with a syslog server.
•
Go to Log&Report > Log setting .
•
Select Log to Remote Host to send the logs to a syslog server.
• Add the IP address of the computer running syslog server software.
• Select Apply to save your log settings.
Recording logs on a WebTrends server
Use the following procedure to configure the DFL-1000 to record logs onto a remote WebTrends firewall
reporting server for storage and analysis. DFL-1000 log formats comply with WebTrends Enhanced Log
Format (WELF) and are compatible with WebTrends Firewall Suite 4.1. Refer to the WebTrends Firewall
Suite documentation for more information.
To record logs on a WebTrends server:
• Go to Log&Report > Log setting .
•
Select Log to WebTrends.
•
Add the IP address of the WebTrends firewall reporting server.
•
Select Apply to save your log settings.
DFL-1000 User Manual
105