All MIBs › NETSCREEN-SET-LOG-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Network Management
Description: Configures log facility levels, syslog server destinations, and event filtering on Juniper NetScreen ScreenOS.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-LOG-MIB?
NETSCREEN-SET-LOG-MIB is a Juniper NetScreen (ScreenOS) module for configuring the device's logging subsystem, including general and VPN-specific traffic logging, syslog server destinations, facility/level settings, and WebTrends log export. It is primarily a configuration MIB rather than a data-collection one, letting an administrator set where logs are sent and at what severity. Its monitoring value lies in confirming the software-level logging configuration is correct and active, e.g. verifying syslog and WebTrends log forwarding are enabled and pointed at the right host/port so that security events are actually being captured off-device. It is a NetScreen/ScreenOS-specific module, used alongside other NetScreen MIBs covering firewall/VPN status rather than any IETF logging standard. It is deployed on Juniper NetScreen firewall/VPN appliances in enterprise perimeter security environments. Engineers can download the NETSCREEN-SET-LOG-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-LOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall/VPN appliance (ScreenOS)
Monitoring Examples
An administrator would check nsSetLogEnable and nsSetLogVPNEnable to confirm general and VPN traffic logging are turned on, then verify nsSetLogHostName and nsSetLogPort point to the correct syslog collector alongside nsSetLogFacility and nsSetLogLevel for severity filtering. Similarly, nsSetLogWebTrendsEnable, nsSetLogWebTrendsHostName, and nsSetLogWebTrendsPort confirm WebTrends-format log export is properly configured. If security events stop appearing on the central log server, checking these objects would reveal whether logging was inadvertently disabled or misdirected.
What Can Be Monitored
- log enable status (general and VPN)
- syslog server host and port
- syslog facility and severity level
- WebTrends log export settings
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Configures syslog settings including VPN encryption and traffic logging on NetScreen firewalls.
Start monitoring Juniper NetScreen firewall/VPN appliance (ScreenOS logging subsystem) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.