Log Redundancy

Chojin

Hi everyone,

in the past I found a artivle about the log redundancy recommendations.

I.E. the App Controll setting were posted there. I rememeber to set global time to 60 sec. but i cant remember the rest if i need to set it for every category to use global parameter.

Does anyone maybe have this guide or a link to the KB?

Currently I cant find it. And i guess the settings were adjusted by our new GMS.

dpreshaw

Hello,

In newer firmware versions, the default configuration for App Control would be to have the Global setting at 60 seconds:

Each App Control category would then inherit this setting from the Global:

As long as the Log Redundancy setting is in place, whether it be Global or per Category, this will prevent the App Control logs from flooding the Event Logs on the firewall as well as prevent syslog flooding when it comes to reporting to GMS or Analytics.

Most of the previous KBs and documentation for this change was in GMS/Analytics related docs and may be the reason it is difficult to find.

Here is one that reflects some of this info.

https://www.sonicwall.com/support/knowledge-base/saving-disk-space-on-gms-by-using-app-control-advanced-log-redundancy-to-reduce-syslog-volume/170502702680583/