HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

98
Exporting user logs
User logs can be exported in the following ways:
User logs can be encapsulated into UDP packets and sent to an IPv4 log server or an IPv6 log server.
The log server analyzes user logs and displays them by class, thus realizing remote monitoring.
User logs in the format of system information are exported to the information center of the device.
You can set the output destinations of the user logs by setting the output parameters of the system
information. For more information about the information center, see "Configuring the information
center."
The two export approaches are mutually exclusive. If you configure both approaches, the system
automatically exports user logs to the information center.
Exporting user logs to log servers
You can specify at most two log servers of the same type or different types for a device. There are three
types of log servers, the VPN user logging server, the IPv4 user logging server, and the IPv6 user logging
server. If you have already specified two servers, you need to delete one to specify a new one. If you
specify a new server that has the same IP address as but has other information different from the current
server, the new configuration overwrites the current one.
To export user logs to an IPv4 log server:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Configure the IPv4 address
and UDP port number of the
log server.
userlog flow export [ vpn-instance
vpn-instance-name ] host
ipv4-address udp-port
Not configured by default.
To export user logs to an IPv6 log server:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Configure the IPv6 address
and UDP port number of the
log server.
userlog flow export [ vpn-instance
vpn-instance-name ] host ipv6
ipv6-address udp-port
Not configured by default.
Exporting user logs to the information center
Exporting user logs to the information center occupies device storage space, so use this export approach
only if there are a small amount of logs. User logs exported to the information center have a severity level
of informational.
To export user logs to the information center:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Export user logs to the
information center.
userlog flow syslog
User logs are exported to the log
server by default.