VMware NSX

 View Only

  • 1.  Logs for NSX-T Segment Profile

    Posted Feb 02, 2023 10:21 AM

    Hello everyone,

    I'm looking for logs for L2 Security action at transport node level. 

    I know how to unable logs for Distributed Firewal rules, but i can't find a way to generate logs for Spoofguard action, or DHCP response, or just IP discovery.

    Do you know where I should look ?

    Regards

     



  • 2.  RE: Logs for NSX-T Segment Profile

    Posted Feb 02, 2023 01:39 PM

    Hi Stephane,

    In the following command, messageid field identifies the type of message to be sent to a logging server.

    set logging-server <hostname-or-ip-address[:port]> proto <proto> level <level> [facility <facility>] [messageid <messageid>] [serverca <filename>] [structured-data <structured-data>]

    In the below example, switching-related logs such as Logical switch, Logical switch ports, Switching profiles & switch security features will be sent.

    Example: set logging-server 192.168.110.60 proto udp level info facility syslog messageid SWITCHING structured-data audit=true