Configure SYSLOG server for Juniper SRX

Logs are very helpful for troubleshooting. In Juniper SRX you can configure logs within the device or send log to log server in the network. Today I will show you how to install and configure syslog server for Juniper SRX device. First let me tell you something about syslog and then syslog server.

Syslog is a standard that logs computer data for analyzing and troubleshooting purpose.

Syslog server is a service that allows devices (sender) to send the logs to the server (collector) for easy management of the logs.

So now we will setup some parameters in SRX device, install the syslog server and view logs of the SRX device. Here is our network scenario

Juniper SRX

First configure the syslog server in srx device. To do so hit the following commands:-

root@mustbegeek# set system syslog host 192.168.4.12 any any

The above command lets the SRX device to send all types of system log messages. This is the only thing we need to do on the SRX device.

Configure SYSLOG Server for Juniper SRX

Now, lets configure SYSLOG server. We will install Syslog Watcher in the Windows 7 operating system. You can also install this software in Windows Server. Download the Syslog Watcher from its website and then install into the server. Make sure that you have allowed the ports UDP 514 and TCP 1468 in Firewall of Windows operating system. So now let’s get started installing Syslog Watcher.

Open the Syslog Watcher installer by double clicking it. Agree the terms and click next. In Installation type dialog box, select the Install Syslog Watcher Service and GUI and click next. Type the installation location where you want to install the syslog watcher, then click next. The installation process will now start. After the installation has completed click Finish.

Open the Syslog watcher from Desktop. The Program ask you to select the Operating Mode, here select Manage Local Server option and click next. Now, before starting the service, click settings.

New dialog box appears. In the left section of the box, select Network Interfaces under Server. Select all the boxes on the right that is under Internet Protocol and Transport Layer. The diagram below shows this,

Click OK. Now click start server. You should now be able to see the log from SRX device.

Click OK. Now click start server. You should now be able to see the log from SRX device.

I hope this has been informative for you.