• Network Security Manager Reporting and Analytics
• About Reporting and Analytics
  • Conventions
    • Guide Conventions
    • UI Conventions
  • Related Documents
  • Navigation
• Manager View
• Group and Tenant Reporting
  • Understanding How the NSM License Affects Reporting
  • Navigating Reports
  • Tenant Reports
  • Group Reports
• Firewall View
• Analytics
  • About Analytics
  • Navigating to the Analytics Page
    • List View
    • Graph View
    • Log View
  • Custom Filters
• Log Download
• Productivity Reports
• Reports
  • Capture Threat Assessment (CTA) Report Rules
  • Default Report Rules
  • Firewall Up-Time Summary Report Rules
  • Custom Reports
• Alerts and Notifications
• System Events
• Notification Center
• SonicWall Support
  • About This Document

Log Download

The Log Download section provides the tools to download firewall session logs in CSV format. The downloaded session log file can be used for further analysis outside of NSM. You can download session logs by navigating to Log Download tab on the Monitor View.

You need to have NSM advance license to view and manage the Log Download.

You can download up to 365 days of session logs using Log Download.

Creating Log Download Rule

To download session logs you must first create a log download rule. This allows you to select the information and the time period for which you want to create the log.

1. Click on the Name of the firewall device, under Firewalls > Inventory, for which you want to view the session logs. You will be directed to the Firewall View for the selected device.

2. Click on Rules page on the Monitor View to see the list of rules that have been created. You can use the Search option to search for an existing rule.

   

3. Click Add Log Download Rule to add a new rule. Fill the following details and click Next. You can run log download rule for a given month only 3 times.

   • Name: Enter a name for the log report.
   • Month: Select the month for which you want to create the report using the calender option. You can hover on the "i" button to see the date and time stamp as well as the number of times a rule has been run for the selected month.
   • Custom Filter: Enable the custom filer toggle to select the custom filter data for your report from the drop down list. You can refer to the Custom Filters section to learn more about how to create and manage custom filters.
   • IP Version - Select IPv4, IPv6 or Both.
   • Firewall Log Type: Select the firewall log type as All Traffic, Blocked, Threats or Web Activities.

   You need to note the following conditions for downloading Network Traffic Log:
   

   

   

   

   

   

4. On the Summary page you can review the data before generating the report. You can also view the approximate number of records to be scanned. Click Apply to confirm.

   

5. After you click Apply, the log download rule is successfully created. Click Close to view the rule on the Rules page.

   

6. The new log download rule appears as a new row in the rules page. You can use the Action button to edit or delete the rule.

   

You need to note the following conditions for downloading Session Log:

• For current month's rules:

  The Session Log file(s) will contain data for the current month except for the previous two days before today's date. For instance, if you create a rule for downloading the log data for February on the 25th of February, the downloaded data will contain information from the 1st to the 23rd of February.

• For previous month's rules:

  When you choose any previous month, the downloaded data will contain the entire month's data. For example, if you create a rule for downloading the lLog data for January on the 25th of February, the downloaded data will contain information from the 1st of January to the 31st of January.

Downloading Log File

After you create the Log Download Rule, you can download the log report on the Saved Logs page.

1. Click on the Saved Logs page to view the list of the successfully created log download rule. You can search for a rule using the Search button at the top of the page and delete a rule using the Delete icon at the right of the page.

   

   Each log download rule will be available for a month for download. You can see the date and time at which it will get expired under the Expiry column.

2. Search for your created rule and expand the row to view the report. If the size of your report is big, then the report will be created in multiple files.

   

3. Click on Download All to download all the files in the report or click on the Download icon under Actions to download a particular file. You can also delete the report using the delete icon.

   

4. The report will be successfully downloaded in your system.

There is no restriction on the number of times you can download a generated log