Forwarding Logs; Sending E-Mail Notification Of Downed Device; Using The Action Manager To Forward Logs By Domain - Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide

Forwarding Logs

Sending E-mail Notification of Downed Device

Using the Action Manager to Forward Logs by Domain

770
management. Enter the path in the Archive Location text box indicating where you want
NSM to store the archived files.
You can forward your log records for use in other applications using one of the following
methods:
Action Manager—Use the Action Manager, a node on the main UI, to configure the
management system to forward logs generated within a specific domain or subdomain
in NSM.
log2Action utility—A command-line utility located on the NSM Device Server.
NOTE: You can also forward logs based on specific rules in a security policy. See
"Configuring Firewall Rules" on page 438 for more information.
You can configure NSM to send you an e-mail notification when a device goes down so
that even if you do not have access to NSM, you will be informed of device status.
In the main navigation tree, select Action Manager > Action Parameters, then
1.
double-click the row that lists all your action parameters.
Enter the default e-mail address in the EMail section for the 'From' e-mail address.
2.
Click the Add icon to open the New Add/Edit EMail Address dialog box.
3.
Enter the default 'To' e-mail address for all log actions in the current domain, then
4.
click OK. Repeat this step if additional default 'To' e-mail addresses are required.
In the main navigation tree, click Action Manager > Device Log Action Criteria, then
5.
click the Add icon.
Click the Category drop-down list box and select Info, select the Device Disconnnect
6.
subcategory, then click OK to save the changes.
Click the Actions tab and check SMTP Enable.
7.
Configure the target e-mail addresses for this rule, if they differ from the defaults
8.
you configured in the previous steps.
Use the Action Manager node to configure the management system to perform actions
(such as syslog, export, or alarm) on log data based on the criteria you specify. These
actions occur for all the managed devices in a specific domain or subdomain.
To enable the management system to export logs, you must configure the following:
Copyright © 2010, Juniper Networks, Inc.