[j-nsp] Logging firewall filter matches to a separate file on an M20

[James Feger]

On Wed, 2 Feb 2005, D. Campbell MacInnes wrote:

> Hey guys,
>
> I'm trying to figure out the best way to get logging information out of
> an M20 from a specific filter.
>
> Problem is, the box has several logging filters running (for various
> purposes) at any given time, so parsing out the output of any given
> logging filter is difficult.

<snip>
>
> Ideally, I'd like to log the matches for the filter to a separate file
> that I can then pull of the box in any of a number of ways, but I'm open
> to other suggestions.
>
> Thanks in advance!
>
> --
> D. Campbell MacInnes


Check out the syslog option, and send it to a syslog-ng server, or your
other favorite syslog server.  I like syslog-ng because it has built in
filter functionality which is very nice.


-j