You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data
type information. What is the MOST likely reason?
A.
Logging has disk space issues. Change logging storage options on the logging server or Security
Management Server properties and install database.
B.
Data Awareness is not enabled.
C.
Identity Awareness is not enabled.
D.
Logs are arriving from Pre-R80 gateways.
Explanation:
The most likely reason for the logs data to stop is the low disk space on the logging device, which
can be the Management Server or the Gateway Server.
The answer is B (confirmation from CCSA).
Full log, compared to Log contains Data type information. But if Data Awareness is not enabled, you won’t see anything.
Cheers.
5
0