Creating a Log Download Rule

To download session logs you must first create a log download rule. This allows you to select the information and the time period for which you want to create the log.

1. Click on the Name of the firewall device, under Firewalls > Inventory, for which you want to view the session logs. You will be directed to the Firewall View for the selected device.

2. Click on Rules page on the Monitor View to see the list of rules that have been created. You can use the Search option to search for an existing rule.

   

3. Click Add Log Download Rule to add a new rule. Fill in the following details and click Next.

   You can run a log download rule for a given month only 3 times.

   • Name: Enter a name for the log report.
   • Month: Select the month for which you want to create the report using the calendar option. You can hover on the i button to see the date and time stamp as well as the number of times a rule has been run for the selected month.
   • Custom Filter: Enable the custom filter toggle to select the custom filter data for your report from the drop-down list. You can refer to the Custom Filters section to learn more about how to create and manage custom filters.
   • IP Version: Select IPv4, IPv6, or Both.
   • Firewall Log Type: Select the firewall log type as All Traffic, Blocked, Threats, or Web Activities.

   Note the following conditions for downloading Network Traffic Log:

   

   

   

   

   

4. On the Summary page, review the data before generating the report. You can also view the approximate number of records to be scanned. Click Apply to confirm.

   

5. After you click Apply, the log download rule is successfully created. Click Close to view the rule on the Rules page.

   

6. The new log download rule appears as a new row on the Rules page. You can use the Action button to edit or delete the rule.

   

Note the following conditions for downloading Session Log:

• Current month's rules: The Session Log file(s) will contain data for the current month except for the previous two days before today's date. For instance, if you create a rule for downloading the log data for February on the 25th of February, the downloaded data will contain information from the 1st to the 23rd of February.

• Previous month's rules: When you choose any previous month, the downloaded data will contain the entire month's data. For example, if you create a rule for downloading the log data for January on the 25th of February, the downloaded data will contain information from the 1st of January to the 31st of January.