CSA Rule Fire - stopping it from logging

Unanswered Question
Dec 29th, 2008

I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.

It is still logging.

So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
tsteger1 Mon, 12/29/2008 - 11:42

Hi Larry, what enforce action is the rule?

Do you have "Take precedence over other rules" checked?

Do you have any log overrides checked for the group?


larrybowers Mon, 12/29/2008 - 11:47

Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.

So I unchecked that and generated rules.

The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.

Thanks for the quick reply.


This Discussion