type

Parameters

model

Sets the logging model.

cache

Writes log entries to memory.

console

Writes log entries to the console screen.

file

Writes log entries to a file on the appliance.

smtp

Forwards log entries as email messages to a specified recipient.

soap

Forwards log entries as SOAP messages to a specified recipient.

syslog

Forwards log entries to a remote syslog daemon over UDP.

syslog-tcp

Forwards log entries to a remote syslog daemon over TCP.

Guidelines

For all log types, use the event command to specify log contents.

• For cache, requires no configuration beyond the identification of log type. You can use the format, size, and timestamp commands to customize log behavior.
• For console, no additional configuration is required. You can use the format and timestamp commands to customize log behavior.
• For file, you must specify the name of the log file with the local-file command. You can use the following commands to customize log behavior.
  • The size command to specify the file size.
  • The rotate command to specify the number of file rotations.
  • The backup command to specify a backup log.
  • The format command to specify the log format,
  • The timestamp command to specify the time stamp method.
  • The archive-mode, upload-method, local-ident, remote-address, email-address, and sender-address commands to specify an archival and retrieval method.
• For smtp, you must use the local-address and remote-address commands to specify source and destination IP addresses and the email-address command to specify a destination email address. You can use the following commands to customize log behavior.
  • The rate-limit command to control event message flow.
  • The local-port and remote-port commands to identify nonstandard source or destination ports.
  • The sender-address command to specify a pseudo recipient email address.
  • The local-ident command to specify a local identifier.
  • The backup command to specify a backup log.
  • The format command to specify the log format.
• For soap, you must use the url command to specify the recipient of SOAP-enveloped log events and use the rate-limit command to throttle the event flow. You can use the backup command to specify a backup log.
• For syslog-based logs, you must use the remote-address command to specify a remote IP address. You can use the following commands to customize log behavior.
  • The remote-port command to specify a nonstandard destination port number.
  • The local-address and local-port commands to specify a specific local interface for syslog transmissions.
  • The local-ident command to specify a local identifier.
  • The facility command to identify the syslog facility.

See the Global sslforwarder command for information on enabling the transmission of syslog events over a secure TCP connection.