Setting An Alert Filter; Setting A Flag Filter; Setting An Address Filter; Setting A Protocol Filter - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Copyright © 2010, Juniper Networks, Inc.
To create a category filter, right-click the Category column header and select Filter >
Set Filter. Select the categories you want to use as the filter criteria, then click OK.
NSM applies the filter to all log entries and displays only the log entries that match the
specified category.
To create a subcategory filter, right-click the Subcategory column header and select
Filter > Set Filter. Select the category first, then select the subcategories you want to
use as the filter criteria, then click OK. NSM applies the filter to all log entries and
displays only the log entries that match the specified subcategory.

Setting an Alert Filter

Apply an alert filter to view log entries that have an enabled or a disabled alert state. To
create an alert filter, right-click the Alert column header and select Filter > Set Filter,
then configure the alert filter settings:
To display log entries that contain an enabled alert, select On and click OK.
To display log entries that contain a disabled alert, select Off and click OK.
NSM applies the filter to all log entries and displays only the log entries that match the
specified alert state.

Setting a Flag Filter

Apply a flag filter to view log entries that have a specified flag type. To create a flag filter,
right-click the Flag column header and select Filter > Set Filter. Select the flag types
that you want to use as the filter criteria, then click OK. NSM applies the filter to all log
entries and displays only the log entries that match the specified flag type.
NOTE: The Unflagged option in the flag filter can be helpful when trying to
locate log entries that do not have assigned flags. When setting the flag
criteria, select Unflagged as the flag type; NSM then displays all log entries
without flags.

Setting an Address Filter

Apply an address filter to view log entries that record events for a specific source or
destination address, or source or destination NAT address. To create an address filter,
right-click the Src Addr, Dst Addr, Nat Src Addr, or Nat Dst Addr column header and select
Filter > Set Filter. Select Click here to add address and enter a valid IP address and click
OK. For NAT addresses, enter the IP address that is translated and click OK.
NSM applies the filter to all log entries and displays only the log entries that match the
specified IP address.

Setting a Protocol Filter

Apply a protocol filter to view log entries for events that use a specific protocol type. To
create a protocol filter, right-click the Protocol column header and select Filter > Set
Filter. Select the protocol types that you want to use as the filter criteria, then click OK.
Chapter 19: Logging
769