Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Add_workflow_for_techpubsAUTH2AUTH1REV5REV6REV3REV1REV2
Panel

In this section:

Table of Contents
maxLevel4

Overview

Multiexcerpt include
MultiExcerptNamepushing_audit_records
PageWithExcerptIP ACL Policing - Packet Filtering

Perform the following steps to push the audit logs to the remote server:

Pagebreak

Anchor
Configuring the Remote Host IP Address, Port Number, and Protocol Type
Configuring the Remote Host IP Address, Port Number, and Protocol Type
Configuring the Remote Host IP Address, Port Number, and Protocol Type

To configure the remote host IP address, port number, and protocol type of the remote server, execute the following command:

Code Block
% set oam eventLog platformAuditLogs auditLogRemoteHost 10.6.81.247 auditLogPort 514 auditLogProtocolType tcp

% commit 
Info
titleNote

To configure the IP address, port, and protocol types of the remote server, the object platformAuditLog must be disabled.

Anchor
Enabling the platformAuditLogs
Enabling the platformAuditLogs
Enabling the platformAuditLogs

To enable the object platformAuditLogs, execute the following command:

Code Block
% set oam eventLog platformAuditLogs state enabled 

% commit

Anchor
Viewing the ACL Rule
Viewing the ACL Rule
Viewing the ACL Rule

Info
titleNote

The SBC automatically adds an ACL rule to send the audit logs through the application layer to the remote server.

To view the defaultAclStatistics, execute the following command:

Code Block
> show table addressContext default ipAccessControlList defaultAclStatistics 
                                                                                       
                            ADDRESS  LIF
ACL                         CONTEXT  GRP                                            POLICING  BUCKET                POL  POL       PACKET  PACKET  Agg 
ID   PROTOCOL  APPLICATION  ID       ID   SOURCE IP ADDRESS  DESTINATION IP ADDRESS MODE      SIZE     CREDIT RATE  ID   PRIORITY  ACCEPT  DISCARD POL OWNER
----------------------------------------------------------------------------------------------------------------------------------------------------------------------
194  TCP       auditlog     1        1    10.6.81.247/32(514) *(0)                  PktRate   50 pkt   50 pkt/s     19   1         716     0       OAM SBX5000

Pagebreak