Configuring Auditing on NetScaler Gateway

September 20, 2018

| Contributed by:

NetScaler Gateway allows you to log the states and status information that the appliance collects. You can use the audit logs to view the event history in chronological order. The messages within the logs contain information about the event that generated the message, a time stamp, the message type, and predefined log levels and message information. You can configure settings that determine the information that is logged and the location where the messages are stored.

NetScaler Gateway currently supports two log formats: a proprietary log format for local logs, and the syslog format for use with syslog servers. You can configure the audit logs to provide the following information:

Level	Description
EMERGENCY	Logs major errors only. Entries in the log indicate that NetScaler Gateway is experiencing a critical problem that is causing it to be unusable.
ALERT	Logs problems that might cause NetScaler Gateway to function incorrectly, but are not critical to its operation. Corrective action should be taken as soon as possible to prevent NetScaler Gateway from experiencing a critical problem.
CRITICAL	Logs critical conditions that do not restrict the operation of NetScaler Gateway, but might escalate to a larger problem.
ERROR	Logs entries that result from a failed operation on NetScaler Gateway.
WARNING	Logs potential issues that could result in an error or a critical error.
NOTICE	Logs more in-depth issues than the information level log, but serves the same purpose as notification.
INFORMATION	Log actions taken by NetScaler Gateway. This level is useful for troubleshooting problems.

The NetScaler Gateway audit log also stores compression statistics for NetScaler Gateway if you configure TCP compression. The compression ratio achieved for different data is stored in the log file for each user session.

NetScaler Gateway uses the log signature SessionID. This allows you to track logs per session rather than per user. Logs that are generated as part of a session have the same SessionID. If a user establishes two sessions from the same user device with the same IP address, each session has a unique SessionID.

Important: If you have written custom log parsing scripts, you need to make this signature change within the custom parsing scripts.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Support: https://www.citrix.com/support

Feedback and forums: https://discussions.citrix.com

Version

Configuring Auditing on NetScaler Gateway

Configuring Auditing on NetScaler Gateway

Configuring Auditing on NetScaler Gateway

In this article