Quantcast
Channel: All Routing posts
Viewing all articles
Browse latest Browse all 8688

How to Filtering the syslog flooding ?

$
0
0

HI all,

 

Can someone guide me how to filter the log messages as per below that flooding the firewall. I'm try do config  as per below but cannot work. Appreciate some advise.

 

{primary:node1}
FW02> show configuration system syslog
archive size 1m files 10;
user * {
    any emergency;
}
host x.x.x.x {
    any any;
    change-log any;
    interactive-commands any;
    inactive: match RT_FLOW_SESSION;
    port 516;
    structured-data;
}
host x.x.x.x {
    any any;
    change-log any;
    interactive-commands any;
    inactive: match RT_FLOW_SESSION;
    port 516;
    structured-data;
}
file messages {
    any notice;
    authorization info;
    explicit-priority;
}
file filter-log {
    any notice;
    match "!(.*Mosquitto.*)";
    explicit-priority;
}

 

GKD-re[4608]: %DAEMON-5: 2017-12-01 08:45:00.321485 ERROR Failed to connect to message broker: No route to host.
Dec  1 08:45:00.321 2017  FW01 GKD-re[4608]: %DAEMON-5: 2017-12-01 08:45:00.321525 INFO Mosquitto error The client is not currently connected. (errno=65). Reconnecting to MQTT in 2s.
Dec  1 08:45:01.725 2017  FW01 GKD-lchassis[5395]: %DAEMON-5: 2017-12-01 08:45:01.725512 ERROR Failed to connect to message broker: No route to host.
Dec  1 08:45:01.725 2017  FW01 GKD-lchassis[5395]: %DAEMON-5: 2017-12-01 08:45:01.725543 INFO Mosquitto error The client is not currently connected. (errno=65). Reconnecting to MQTT in 2s.
Dec  1 08:45:02.026 2017  FW01 GKD-chassis[4742]: %DAEMON-5: 2017-12-01 08:45:02.026516 ERROR Failed to connect to message broker: No route to host.
Dec  1 08:45:02.026 2017  FW01 GKD-chassis[4742]: %DAEMON-5: 2017-12-01 08:45:02.026546 INFO Mosquitto error The client is not currently connected. (errno=6

 

Thanks


Viewing all articles
Browse latest Browse all 8688

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>