CSA Rule Fire - stopping it from logging

Unanswered Question
Dec 29th, 2008
User Badges:

I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.


It is still logging.


So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.


Larry

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
tsteger1 Mon, 12/29/2008 - 11:42
User Badges:
  • Red, 2250 points or more

Hi Larry, what enforce action is the rule?


Do you have "Take precedence over other rules" checked?


Do you have any log overrides checked for the group?


Tom


larrybowers Mon, 12/29/2008 - 11:47
User Badges:

Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.


So I unchecked that and generated rules.


The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.


Thanks for the quick reply.

tsteger1 Mon, 12/29/2008 - 11:53
User Badges:
  • Red, 2250 points or more

That might do it... good luck.


Tom

Actions

This Discussion