NAT Logging
To store NAT logs, first create a bucket in Object Storage for the logs, and then configure that bucket in the NAT Logging log repository. Then, when you enable log storage in the NAT detail view, NAT logs will start being saved to the Object Storage bucket.
To store NAT logs, you need to configure in the following order.
- To store NAT logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Create Object Storage.
- To set the bucket for the NAT Logging log repository, please refer to Using NAT Logging Log Repository.
- To set the log storage option to Enabled in the NAT detail view, refer to Using NAT Log Storage.
Using NAT Logging Log Repository
To set NAT log storage to enabled, you must first configure the log repository in NAT Logging.
- Click the All Services > Management > Network Logging > NAT Logging menu. 1. Navigate to the NAT Logging List page.
- Click the Log Repository Settings button at the top of the NAT Logging List page. 2. Log Repository Settings Navigate to the popup window.
- Log storage configuration In the popup window, select the log storage bucket. 3. When you select a bucket, the log storage path is displayed.
- Log storage settings In the popup window, verify the log storage bucket and log storage path, then click the Confirm button.
- Notification After checking the popup window’s message, click the Confirm button.
NAT Logging List
When you configure the NAT Logging log storage bucket, the NAT Logging list is displayed.
- All Services > Management > Network Logging > NAT Logging Click the menu. * Go to the NAT Logging List page.
Category RequiredDetailed description Resource ID required NAT resource ID Save target Required NAT resource name Registration Date and Time Required NAT log repository registration date and time Table. NAT Logging list items
Check NAT Logging contents
Refer to the following information to review the saved log entries.
Stored log example: 2024-10-11T11:19:03,accept,259,17,192.168.2.173,46937,192.168.0.53,53,100.100.14.52,26937
| Category | Explanation |
|---|---|
| 2024-10-11T11:19:03 | Log date and time (2024-10-11, 11:19:03) |
| accept | Action (deny / accept) |
| 259 | Firewall Rule ID (Policy ID) that generated the log |
| 17 | IP Protocol ID
|
| 192.168.2.173 | Source IP |
| 46937 | Departure Port |
| 192.168.0.53 | Destination IP |
| 53 | Destination Port |
| 100.100.14.52 | NAT-translated IP |
| 26937 | NAT-translated Port |
NAT Logging Log Storage Not Used {#use-1}
In NAT Logging, you can configure the log repository as unused.
Click the All Services > Management > Network Logging > NAT Logging menu. Navigate to the NAT Logging List page. On the NAT Logging List page, click the Log Storage Settings button at the top. You will be taken to the Log Storage Settings popup. Log storage settings in the popup, select Log storage bucket as Not used, and click the Confirm button.