Meraki MX100防火墙

[Mike18]

请问MX100防火墙的日志可以保存多久，是否任何操作或者被攻击都会有日志记录，如果想联系技术工程师该如何做？

[Brash · Accepted solution]

The Meraki Dashboard maintains logs for up to 3 months.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Viewing_Old_Event_L...

I highly recommend having an on-prem syslog server that all devices send logs to as it will include more detail than the standard event logs.

In regards to contacting technical support, you can open a case via the dashboard or call the support number.

[Mike18]

thank you for help, may i ask how to setup on-prem syslog server?

[Brash]

From the Meraki side it's relatively simple, you just tell it where to send the logs

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overv...

In terms of setting up a syslog server, there's multiple options out there - paid products and open source.

The basic premise is the same for all, they simply ingest logs. The main differentiator is the interface, ease of deployment/use, filtering and alerts etc.

Some popular ones include graylog, ELK, nagios, splunk, kiwi.

[Mike18]

Thanks a lot.

[Mike18]

hi, thanks for help, I have check with my MX100, but I can't find the syslog function, would you please help to find where the syslog is in MX 100?

[Mike18]

hi, thanks, I found it.