Configure a Juniper SRX to forward syslogs
- Log in to the Juniper SRX device.
- Navigate to Configure > CLI Tools > Point and Click CLI in the Juniper SRX device.
- Expand System and click Syslog.
- In the Syslog page, click Add New Entry placed next to 'Host'.
- Enter the IP address of the ActZero VM
- Click Apply to save the configuration.
Update policies to log events.
- Navigate to Configure > Security > Policy > FW Policies
- For each policy navigate to Logging/Count and in Log Options, select Log at Session Close Time.
Reference Juniper SRX documentation for further detail.
Was this documentation helpful? Please send us your feedback!