Configuring Juniper SRX Logging

Overview

You can configure Juniper SRX logging to occur at the beginning or end of a session with session-init or session-close.

By default, logging occurs at the start of the session. If session processing is overloaded or backed-up, configure SRX logging to occur at the end of the session.

The Juniper logging option in StConf affects only the provisioning command logging for all the SRX devices managed in SecureTrack.

Configure Juniper Logging

  1. Navigate to: https://<SecureTrack_IP>/securetrack/admin/stcgitest.htm
  2. Navigate to Edit StConf > Fetch StConf.
  3. In the StConf file, navigate to the <provisioning> section and verify that the <junos_log_options> flag is present.
  4. If the <junos_log_options> flag is not present, manually insert it into the <provisioning> section.
  5. In the <provisioning> section of the StConf file, set the <junos_log_options> flag to configure logging to occur at the beginning of the session (session-init) or at the end of the session (session-close).

    The logging default is session-init

  6. Click Submit New Conf.

Sample code

<provisioning>
<junos_log_options>session-close</junos_log_options> <!--Available values: session-init, session-close-->
</provisioning>

Example