A customer found there are many alarm “The log format is incorrect” in LogCenter
And the software version of LogCenter is :
Step 1: Checked the detail of such alarm, and found that it is “dataflow logs”.
Step2: Login USG6500, and found that there are some audit logs.
Step3: Login USG using audit account, and found there is audit-policy which will generate audit logs.
The detail audit configuration:
Step4: For current software version of V100R001C20SPC101, it is not support audit logs. After disable audit policy, and clear the current alarm in LogCenter, there is no more such alarm.
Step5: In future, R&D department will release a new version of LogCenter to support all the audit logs sent by USG6600.