After the logging function is enabled, the device can create logs on specific locations, such as Syslog, firewall, and Cyber Command. Nine types of logs can be created, including Security Logs, Application Control Logs, Admin Operation Logs, Traffic Audit Logs, NAT Logs, User Authentication Logs, System Failure Logs, SSL VPN Logs, Local ACL Logs, and INP Audit Logs. Some types of logs are disabled by default. Check the corresponding options on the page to enable logs as needed. The page is shown as follows.

By default, it is recommended to enable Security Logs only and store the logs locally. You can make changes to enable other logging functions according to actual needs. A large amount of data will be generated when performing application control logging, traffic audit logging, NAT logging, or local ACL logging. If these logging functions need to be enabled, it is recommended to use a third-party storage device to store logs.

The INP audit log module has requirements for device hardware specifications and requires at least 8GB of memory to support it.