12-29-2008 10:09 AM - edited 03-09-2019 09:55 PM
I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.
It is still logging.
So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.
Larry
12-29-2008 11:42 AM
Hi Larry, what enforce action is the rule?
Do you have "Take precedence over other
Do you have any log overrides checked for the group?
Tom
12-29-2008 11:47 AM
Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.
So I unchecked that and generated rules.
The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.
Thanks for the quick reply.
12-29-2008 11:53 AM
That might do it... good luck.
Tom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide