Configuring Logging

Logging provides a way to record the events that the IDS sensor sees for later analysis either by security personnel, network operations, or event correlation software. This section covers how to configure event logging as well as IP logging, how to export event logs, and how to configure automatic IP logging. Logging changes between IDS software version 3.1 and 4.0 include the discontinuation of event logging to files in 4.0. All events are logged to the internal database running on the IDS sensor. IP logging does not change between the two software versions.