The Log Download section provides the tools to download firewall session logs in CSV format. The downloaded session log file can be used for further analysis outside of NSM. You can download session logs by navigating to Log Download tab on the Monitor View.
You need to have NSM advance license to view and manage the Log Download.
Creating Log Download Rule
To download session logs you must first create a log download rule. This allows you to select the information and the time period for which you want to create the log..
Click on Rules page on the Monitor View to see the list of rules that have been created. You can use the Search option to search for an existing rule.
Click Add Log Download Rule to add a new rule. Fill the following details and click Next.
Name: Enter a name for the log report.
Time Range: Select the time range for which you want to create the report using the calender option. You can select a minimum of 1 day and maximum of 30 days.
Custom Filter: Enable the custom filer toggle to select the custom filter data for your report from the drop down list.
Flow Log Type: Select the flow log type as All Traffic, Blocked, Threats or Web Activities.
On the Summary page you can review the data before generating the report. You can also view the approximate data to be scanned. Click Apply to confirm.
After you click Apply, the log download rule is successfully created. Click Close to view the rule on the Rules page.
The new log download rule appears as a new row in the rules page. You can use the Action button to edit or delete the rule.
Downloading Log File
After you create the Log Download Rule, you can download the log report on the Saved Logs page.
Click on the Saved Log page to view the list of the successfully created log download rule. You can search for a rule using the Search button at the top of the page and delete a rule using the Delete icon at the right of the page.
Search for your created rule and expand the row to view the report. If the size of your report is big, then the report will be created in multiple files.
Click on the Download icon under Actions to download the report. You can also delete the report using the delete icon.
The report will be successfully downloaded in your system.