Monitor log usage

[Marco_Valenti]

Hello felow checkmates

I would like to know if some of you implemented a way to monitor with snmp the log usage for certain domain on a multidomain management env , example monitor the usage of $FWDIR/log or something similar in a way.

The objective is to notice if a certain source getting a lot of drop in the firewall blade so you can investigate and decide to not log this kind of drop.

Regards

[PhoneBoy]

This doesn't seem like the sort of thing you'd use SNMP to monitor for.
How do you propose the information flow would work exactly?

[Marco_Valenti]

I assume that most of us log the drops on the cleanup at least , if something strange like bilions and bilions and bilions ( 🙂 ) of drop would happen the fw.log will increase and switch according to your log settings, in this case $FWDIR/log should increase and you can see that something is happen if you except certain dimension for $FWDIR/log directory.

At least this is one thing that comes to my mind for monitoring such behavior but I 'm open to suggestion