Citrix Systems How to Configure and Utilize Netscaler Audit Logs

Chapter 3 Audit Logging

INFORMATION

Log actions taken by the NetScaler. This level is useful for troubleshooting problems.

DEBUG

Log extensive, detailed information to help developers troubleshoot problems.

To configure an auditing server action

1.In the navigation pane, expand System, expand Auditing, and then click Policies.

2.In the details pane, on the Servers tab, do one of the following:

•To create a new server action, click Add.

•To modify an existing server action, select the server, and then click Open.

3.In the Create Auditing Server or Configure Auditing Server dialog box, specify values for the following parameters, which correspond to parameters described in "Parameters for configuring auditing servers" as shown:

•Name*—name

•IP Address*—serverIP

•Port—serverPort

•Log Levels—logLevel

•Log Facility—logFacility

•Date format—dateFormat

•Time Zone—timeZone

•TCP Logging—tcp

•ACL Logging—acl

•User Configurable Log Messages—userDefinedAuditlog

•AppFlow Export—appflowExport

*A required parameter

4.Click Create or OK, and then click Close.

A message appears in the status bar, stating that the auditing server has been configured successfully.

Configuring Audit Policies

The audit policies define the SYSLOG or NSLOG protocol.

To configure a SYSLOG policy by using the command line

At the NetScaler command prompt, type the following commands to set the parameters and verify the configuration:

76