Juniper SRX logs failing to parse when creating a snapshot report

Copper Contributor

Juniper SRX is listed as supported, but is that only for logs based on RT_FLOW_SESSION_CLOSE? We have a client that wants to use both snapshots and continuous reports, but their Juniper SRX logs will not parse - they log based on RT_FLOW_SESSION_CREATE, but I'm unsure whether that is the issue.

 

I can provide an anonymised log if required.

0 Replies