H3C Technologies H3C SecCenter UTM Manager - Manual (Page 247)

239
NOTE:
The port number set here must match the management port number set in the SecCenter, which can be
seen on the page System Management >System Config > Management Ports.
2. Configure user logs parameters
Flow logging records users’ access information to the external network. The device classifies and
calculates flows through the 5-tuple information, which includes source IP address, destination IP address,
source port, destination port, and protocol number, and generates user flow logs.
Flow logs can be output in the following two formats, and you can select either one.
• Output to the specified userlog host in UDP packets in binary format.
• Output to the information center of the device in the format of syslog, and it can be displayed as
other syslogs in Log Report > Report and can be sent to a syslog server too.
In this example, we choose to send flow logs to a log host.
a. Select Log Report > Userlog from the navigation tree.
b. Configure the SecCenter host IP address as the log host IP address
c. Set the port number to 30017.
d. Click Apply.