SRX240 web filter results by email or.... ?

I'm using an SRX240 for web filtering.  Ideally, I'd like to receive a summary email every 8 hours or so that lists all the blocks that occurred.  (I believe that 8 hours will generate a manageable-sized log - but that's a good question).

So, I guess this means collecting the results in a log somewhere / somehow.
Sending the log out via email.
Repeat and delete the old log.

How might one do this?
LVL 26
Fred MarshallPrincipalAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
dpk_walConnect With a Mentor Commented:
Logs generated by different daemon have different keywords. For webfiltering we can filter logs on keyword WEBFILTER_ using CLI as below:
set system syslog file webfilter-log match WEBFILTER_ any any

Here we create syslog file named webfilter-log.

Now we can create this file on the SRX itself and then create a shell script which would FTP/SCP file to the designated server [using crontab] and then delete the file from SRX.
Once the file is on FTP/SCP server there can be another script running which would pick and email the file.
OR we can have SRX send logs to a remote syslog server and there you can work on the logs as you need.

Also, have a look at KB: http://kb.juniper.net/KB28213

Thank you.
0
All Courses

From novice to tech pro — start learning today.