Logs from TE SG on TE Appliance managed by a different MGMT

[Andrey_Ganichev]

Hello,

I have the question about TE logs. There is a such configuration (sk102309 section 10) : TE Appliance R77.30 JHF Take 338 engine 57.990004002 is managed MGMT-TE R80.20. GWS that send files for emulation to TE Appliance are manager anothers MGMT. In SmartLog on MGMT-TE R80.20 I don't see Threat Emulation logs. Is it by design or something wrong in a configuration?

tecli s s
General Information:
--------------------
Scanned files: 5 264

Files destined for Local Emulation:
-----------------------------------
Scanned files locally: 5 264

[PhoneBoy]

I assume the logs would go to the log server it is configured to go to (i.e. by the other management).

[Andrey_Ganichev]

On the other mamangement (manages the GW) I see TE logs.
tecli advanced remote emulator logs enable on GW must enable the logs on TE MGMT I think..
It seems I see only logs with malisious if detected.

[Thomas_Werner]

In your case by default if using two dedicated Mgmts logs should be created on both log servers.

If you have a distributed setup with one Mgmt (so GW and SB appliance in one Mgmt) you would only get one log from the GW.

Regards Thomas