Hello,
we have an SRX with 4 x Routing instances, all interafces are configured and members of one of these 4 routing instances. I need to get the SRX to send SYSLOG data to our syslog server but cannot get it working. I believe this SYSLOG traffic will originate from the default routing instance; i have no interfaces in the default routing instance. The SYSLOG server is accessed the MGMT routing instance, i have added the config below but my syslog server is getting no logs.
system
syslog {
archive size 100k files 3;
user * {
any emergency;
}
host 192.168.1.200 {
any any;
}
file messages {
any critical;
authorization info;
}
file interactive-commands {
interactive-commands error;
}
file TRAFFIC-LOG {
any any;
match RT_FLOW_SESSION;
}
source-address 192.168.30.254;
routing-options {
traceoptions {
file routing-log size 10k files 5;
flag general;
}
static {
route 192.168.1.200/32 next-table MGMT.inet.0;
can anyone assist please? note 192.168.30.254 is an address assigned to an internface in MGMT routing instance. i can PING the SYSLOG server fine from the MGMT routing instance.
Many thanks
Ryan