Schedule Log Exports to an SCP or FTP Server

Select
Device
Scheduled Log Export
and click
Add
.
Enter a
Name
for the scheduled log export and
Enable
it.
Select the
Log Type
to export.
Select the daily
Scheduled Export Start Time
. The options are in 15-minute increments for a 24-hour clock (00:00 - 23:59).
Select the
Protocol
to export the logs:
SCP
(secure) or
FTP
.
Enter the
Hostname
or IP address of the server.
Enter the
Port
number. By default, FTP uses port 21 and SCP uses port 22.
Enter the
Path
or directory in which to save the exported logs.
Enter the
Username
and, if necessary, the
Password
(and
Confirm Password
) to access the server.
(
FTP only
) Select
Enable FTP Passive Mode
if you want to use FTP passive mode, in which the firewall initiates a data connection with the FTP server. By default, the firewall uses FTP active mode, in which the FTP server initiates a data connection with the firewall. Choose the mode based on what your FTP server supports and on your network requirements.
(
SCP only
) Click
Test SCP server connection
. Before establishing a connection, the firewall must accept the host key for the SCP server.
If you use a Panorama template to configure the log export schedule, you must perform this step after committing the template configuration to the firewalls. After the template commit, log in to each firewall, open the log export schedule, and click
Test SCP server connection
.
Click
OK
and
Commit
.