"Any from Firebox-00" traffic still logged even if checkbox is unchecked in diagnostic setup

Flo_Paris

July 2021 in Firebox - Dimension, Logging and Reporting

Hello,

My firewall is sending a lot of "useless" logs to my splunk instance and i tried to remove it without success (to reduce the future needed daily indexed license...).

Any idea of what i could have missed ?

Thanks,

Florent

0

Comments

• 

  Flo_Paris

  July 2021 edited July 2021

  NB : setup / logging / Diagnostic log level / "Enable Logging from traffic sent from this device" has been unchecked.

  0
• 

  Flo_Paris

  July 2021

  Seems that the second checkbox did the job : "Enable logging for reports for traffic sent from this device (Fireware OS version 11.10.5 and higher)".

  0
• 

  Flo_Paris

  July 2021

  remaining question : what is the goal of the first checkbox then ?

  0
• 

  Bruce_Briggs

  July 2021

  Traffic Monitor only - not for reports

  1