Contents

Fast log output commands· 1

customlog format 1

customlog host 2

customlog host source· 3

customlog timestamp· 4

Fast log output commands

customlog format

Use customlog format to enable fast log output.

Use undo customlog format to restore the default.

Syntax

customlog format { aft | attack-defense | dpi | nat { cmcc | telecom | unicom } | packet-filter | session | wlan }

undo customlog format { aft | attack-defense | dpi | nat | packet-filter | session | wlan } *

Default

Fast log output is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

aft: Enables fast log output for the AFT module.

attack-defense: Enables fast log output for the attack defense module.

dpi: Enables fast log output for a DPI-related module.

nat: Enables fast log output in a specific format for the NAT module.

·     cmcc: Specifies the CMCC format.

·     telecom: Specifies the TELECOM format.

·     unicom: Specifies the UNICOM format.

packet-filter: Enables fast log output for the packet filter module.

session: Enables fast log output for the session management module.

wlan: Enables fast output of the event notification logs of the WLAN module.

Usage guidelines

The fast log output feature enables fast output of logs to log hosts.

Typically, logs generated by a service module are first sent to the information center, which then outputs the logs to the specified destination (such as to log hosts). When fast log output is configured, logs of service modules are sent directly to log hosts instead of to the information center. Compared to outputting logs to the information center, fast log output saves system resources.

Fast log output, flow log, and information center are exclusive from one another. When the customlog format command is configured, the specified service module uses only the fast log output method. For more information about flow log, see "Configuring flow log." For more information about the information center, see System Management Configuration Guide.

To output NAT logs to a log host, you must specify the log format required by the log host in the customlog format and customlog host commands.

Logs of the AFT, attack defense, DPI, packet filter, and session management modules can be output only in one format. You do not need to specify the format for these logs.

Examples

# Enable fast log output in CMCC format.

<Sysname> system

[Sysname] customlog format cmcc

customlog host

Use customlog host to configure fast log output parameters.

Use undo customlog host to remove the fast log output configuration.

Syntax

customlog host { hostname | ipv4-address | ipv6 ipv6-address } [ port port-number ] export { aft | attack-defense | cmcc-sessionlog | cmcc-userlog | dpi | packet-filter | session | telecom-sessionlog | telecom-userlog | unicom-sessionlog | unicom-userlog } *

undo customlog host { hostname | ipv4-address | ipv6 ipv6-address } [ port port-number ]

Default

Fast log output parameters are not configured.

Views

System view

Predefined user roles

network-admin

Parameters

hostname: Specifies a log host by its name, a case-insensitive string of 1 to 253 characters. The host name can contain letters, digits, hyphens (-), underscores (_), and dots (.).

ipv4-address: Specifies a log host by its IPv4 address.

ipv6 ipv6-address: Specifies a log host by its IPv6 address.

port port-number: Specifies the port number of the log host. The value range is 1 to 65535, and the default is 514. The setting must be the same as the port number configured on the log host. Otherwise, the log host cannot receive logs.

export: Specifies a source module for fast log output.

aft: Outputs logs of the AFT module to the log host.

attack-defense: Outputs logs of the attack defense module to the log host.

cmcc-sessionlog: Outputs NAT session logs in CMCC format to the log host.

cmcc-userlog: Outputs NAT444 user logs in CMCC format to the log host.

dpi: Outputs logs of a DPI-related module to the log host.

packet-filter: Outputs logs of the packet filter module to the log host.

session: Outputs logs of the session management module to the log host.

telecom-sessionlog: Outputs NAT session logs in TELECOM format to the log host.

telecom-userlog: Outputs NAT444 user logs in TELECOM format to the log host.

unicom-sessionlog: Outputs NAT session logs in UNICOM format to the log host.

unicom-userlog: Outputs NAT444 user logs in UNICOM format to the log host.

Usage guidelines

The customlog host command takes effect only after the customlog format command is configured.

To output NAT logs to a log host, you must specify the log format required by the log host in the customlog format and customlog host commands.

Examples

# Output NAT session logs and NAT444 user logs in CMCC format to the log host at 1.1.1.1.

<Sysname> system-view

[Sysname] customlog host 1.1.1.1 port 1000 export cmcc-sessionlog cmcc-userlog

customlog host source

Use customlog host source to specify a source IP address for fast log output.

Use undo customlog host source to restore the default.

Syntax

customlog host source interface-type interface-number

undo customlog host source

Default

The source IP address of fast output logs is the primary IP address of the outgoing interface.

Views

System view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies a source interface by its type and number. The interface's primary IP address will be used as the source IP address of fast output logs.

Usage guidelines

Configure this command when you need to filter logs according to their source IP addresses on the log host.

The customlog host source command takes effect only after the customlog format and customlog host commands are configured.

Examples

# Use the IP address of Loopback 0 as the source IP address of fast output logs.

<Sysname> system-view

[Sysname] interface loopback 0

[Sysname-LoopBack0] ip address 2.2.2.2 32

[Sysname-LoopBack0] quit

[Sysname] customlog host source loopback 0

customlog timestamp

Use customlog timestamp localtime to configure the timestamp of fast output logs to show the system time.

Use undo customlog timestamp localtime to restore the default.

Syntax

customlog timestamp localtime

undo customlog timestamp localtime

Default

The timestamp of fast output logs shows the Greenwich Mean Time (GMT).

Views

System view

Predefined user roles

network-admin

Examples

# Configure the timestamp of fast output logs to show the system time.

<Sysname> system-view

[Sysname] customlog timestamp localtime