Logging; Table 91: Log Entry Severity Levels For Dmi Devices; Table 92: Log Entry Severity Levels For Screenos And Idp Devices; About Log Severity - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

About Log Severity

The log severity level defines the urgency of the information contained in the log entry.
The severity level of a log entry depends on the log category, such as information, traffic,
or configuration log entries.
You can configure a managed device to generate log entries only for those events that
meet a specific severity level. Additionally, you can configure the device to forward log
entries that contain a specific severity to a specific destination, such as a console location
or syslog server. You can forward multiple log entries with different severity levels to the
same log destination.
Juniper Networks assigns a predefined severity level in the firmware of each Juniper
Networks device. However, these severity levels are not the same as the severity levels
that appear in the log entries viewed in an NSM UI module.
Table 91 on page 741 details how NSM handles severity levels as defined by DMI devices:

Table 91: Log Entry Severity Levels for DMI Devices

NSM Severity
Alert
Critical
Emergency
Error
Notice
Warning
Informational
Debug
Table 92 on page 741 details how NSM handles severity levels as defined by ScreenOS
and IDP devices:

Table 92: Log Entry Severity Levels for ScreenOS and IDP Devices

NSM Severity Severity
Device_critical_log Emergency
Alert
Copyright © 2010, Juniper Networks, Inc.
Description
Log entries triggered when system requires immediate action.
Log entries triggered when system encounters critical conditions.
Log entries triggered when system becomes unusable.
Log entries triggered when system encounters errors, such as errors in device function.
Log entries triggered when system encounters normal but significant conditions.
Log entries triggered when system encounters warning conditions.
Log entries triggered by general system operations such as when a device connects or disconnects.
Log entries triggered when system receives debug-level messages.
Description
Log entries triggered when traffic matches a critical severity attack object.
Also includes log entries triggered by the SCREEN-level attacks, SYN attacks,
Tear Drop attacks, and Ping of Death attacks.
Log entries triggered by the general firewall SCREEN-level attacks or other
conditions that require immediate attention, such the expiration of license
keys.
Chapter 19: Logging
741