Citrix Systems CITRIX NETSCALER 9.3 manual StringBuilderExpr, BypassSafetyCheck, LogtoNewnslog

Chapter 3 Audit Logging

To modify or remove an audit message action by using the NetScaler command line

wTo modify an audit message action, type the set audit messageaction command, the name of the action, and the parameters to be changed, with their new values.

wTo remove an audit message action, type the rm audit messageaction command and the name of the action.

Example

>add audit messageaction log-act1 CRITICAL '"Client:"+CLIENT.IP.SRC+" accessed "+H TTP.REQ.URL' -bypassSafetyCheck YES

Done

>show audit messageaction log-act1

1)Name: log-act1

LogMsgStr: "Client:"+CLIENT.IP.SRC+" accessed "+HTTP.REQ.URL

Loglevel:CRITICAL

Log2Newnslog:NO BypassSafetyCheck : YES Hits: 0

Undef Hits: 0

Action Reference Count: 0

Done

Parameters for configuring an audit message action

name

The name of the audit message action. The name can begin with a letter, number, or the underscore symbol, and can consist of up to 127 characters including letters, numbers, and hyphen (-), period (.) pound (#), space ( ), at sign (@), equal sign (=), colon (:), and underscore (_) symbols.

logLevel

The log level for the message action. Possible values: EMERGENCY, ALERT, CRITICAL, ERROR, WARNING, NOTICE, INFORMATIONAL, DEBUG, NONE.

stringBuilderExpr

The expression that defines the format of the log message. For a complete description of NetScaler expressions, see the Citrix NetScaler Policy Configuration and Reference Guide. For a link to the guide, see the Documentation Library.

bypassSafetyCheck

Bypass the safety check and allow unsafe expressions. Possible values: YES, NO.

Default: NO.

logtoNewnslog

Log messages in newnslog format in addition to logging them in syslog format. Possible values: YES, NO. Default: NO.

80