CSA Rule Fire - stopping it from logging

Unanswered Question
Dec 29th, 2008

I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.


It is still logging.


So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.


Larry

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
tsteger1 Mon, 12/29/2008 - 11:42

Hi Larry, what enforce action is the rule?


Do you have "Take precedence over other rules" checked?


Do you have any log overrides checked for the group?


Tom


larrybowers Mon, 12/29/2008 - 11:47

Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.


So I unchecked that and generated rules.


The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.


Thanks for the quick reply.

Actions

This Discussion