R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

71
To do … Use the command… Remarks
Configure the IPv4 address and UDP
port number of the log server
userlog flow export
[ vpn-instance
vpn-instance-name ] host
ipv4-address udp-port
Required
Not configured by default.
2. Exporting flow logs to information center
Follow these steps to export flow logs to information center:
To do … Use the command…
Remarks
Enter system view system-view —
Export flow logs to information
center
userlog flow syslog
Required
Flow logs are exported to the log
server by default.
NOTE:
• Exporting flow logs to the information center takes up storage space of the device, so adopt this expor
t
approach when there are a small amount of logs.
• When the flow lo
g
s are exported to the information center, the severity level of the lo
g
s is informational,
namely, general messages of the device.
Displaying and maintaining flow logging
To do … Use the command… Remarks
Display the configuration and
statistics about flow logging
display userlog export Available in any view
Clear statistics about flow logging reset userlog flow export Available in user view
Clear flow logs in the cache reset userlog flow logbuffer Available in user view
CAUTION:
Clearin
g
flow lo
g
s in the cache causes the loss of lo
g
information, so you are recommended not to clear
the cache unless you are sure you want to clear it.
Flow logging configuration examples
1. Network requirements
As shown in Figure 25, L
og server is used to monitor User's access to the network.