Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
349
Views
5
Helpful
3
Replies

CSA Rule Fire - stopping it from logging

larrybowers
Level 1
Level 1

‎12-29-2008 10:09 AM - edited ‎03-09-2019 09:55 PM

I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.

It is still logging.

So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.

Larry

Labels:
0 Helpful
3 Replies 3

tsteger1
Level 8
Level 8

‎12-29-2008 11:42 AM

Hi Larry, what enforce action is the rule?

Do you have "Take precedence over other rules" checked?

Do you have any log overrides checked for the group?

Tom

larrybowers
Level 1
Level 1
In response to tsteger1

‎12-29-2008 11:47 AM

Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.

So I unchecked that and generated rules.

The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.

Thanks for the quick reply.

0 Helpful

tsteger1
Level 8
Level 8
In response to larrybowers

‎12-29-2008 11:53 AM

That might do it... good luck.

Tom

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents