Directing Data to a WebTrends Server
Managing Packet Data in Logs
Copyright © 2010, Juniper Networks, Inc.
Table 96: Syslog Settings for Log Entries
Field
Enable Syslog Messages
Port Number
Use Trust Zone Interface
as Source IF for VPN
Include Traffic Log
Config Host
The managed device can send syslog reports to a Webtrends Syslog host. Webtrends
offers a product called the Webtrends Firewall Suite that enables you to customize syslog
reports to display the information you want in a graphical format.
To send log entries to a WebTrends server, click WebTrends. NSM displays the
WebTrends dialog box. Enter appropriate data into the following fields.
Table 97: WebTrends Settings for Log Entries
Field
Enable WebTrends Message
WebTrends Host Name
Port
Use Trust Zone Interface as
Source IP for VPN
To set severity levels for WebTrends destinations, click on Log Settings under Report
Settings in the navigation tree. Then click the WebTrends tab and click the desired
severity check box.
Packet data can be stored on IDP sensors or included with log data sent to the NSM
server. Use NSM to configure the IDP sensor to:
Store packet data on the IDP sensor, which NSM can later retrieve. For IDP 4.1 and later,
this option is the default setting and improves performance.
Description
Initiates the logging of system event messages to the Syslog server.
Indicates the port number from where the messages are sent to the
Syslog server.
Specifies using the interface mapped to the Trust zone as the source
of traffic for a VPN.
Specifies that all traffic log events are included as part of the
messages sent to the syslog server.
Indicates the name of the host device.
Description
Directs NSM to forward a log to the WebTrends server.
The name of the WebTrends server.
Specifies the port number through which the device sends
the log to the WebTrends server.
Directs the device to use the interface mapped to the trust
zone as the location for the VPN over which the packets are
forwarded to the WebTrends server.
Chapter 19: Logging
753