• SonicOS 8
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• Dashboard
• System
  • Device
  • Summary
    • Traffic Distribution
    • Top Users
    • Insights
    • Observed Threats
    • Top Countries
      • Dropped
      • Bytes Received
      • Bytes Sent
  • Security Services
  • Network
    • Top Applications
    • Top Addresses
    • Top Users
    • Top Website Ratings
  • Threat
    • Top Intrusion
    • Top Virus
    • Top Spyware
    • Top Botnet
  • DNS Filtering
• Access Points
  • Feature Limitations
  • Access Point Snapshot
  • Client Association
  • Real-Time Bandwidth
  • Client Report
    • OS Type
    • Radio
    • Top Client
  • Real-Time Client Monitor
  • Client Report and Client Monitor Filtering
• Capture ATP
• Topology
  • Managing the Topology View
  • Managing Access Points in the Topology View
    • Editing an Access Point
    • Showing Statistics
    • Monitoring Status on an Access Point
    • Deleting an Access Point
• Real-Time Charts
• System Monitor
  • Using the Toolbar
  • Common Features
    • Legends
    • Tooltips
    • Changing Chart Format
    • Selecting IPv6/IPv4
    • Current, Minimum, Maximum Display
  • Multicore Monitor
  • Applications Bandwidth
  • Interface Usage
    • Packet Rate Monitor
    • Packet Size
  • Connection Usage
    • Active Connection Count
• Protocol Monitor
  • Enabling the Protocol Monitor
  • Using the Toolbar
  • Using Per-Chart Viewing Options
    • Legends
    • Tooltips
• User Monitor
• Bandwidth Monitor
• AppFlow
• AppFlow Report
  • Applications
  • Users
  • IP Addresses
  • Viruses
  • Intrusions
  • Spyware
  • Locations
  • Botnets
  • Web Categories
• AppFlow Monitor
  • Applications
  • Users
  • Web Activity
  • Initiator IPs
  • Responder IPs
  • Threats
  • VoIP
  • VPN
  • Devices
  • Contents
  • Policies
• CTA Report
• SD-WAN
• Monitoring SD-WAN
• Viewing SD-WAN Rules Connections
• Logs
• System Logs
  • Viewing System Logs
  • System Log Functions
  • Display Options
  • Filtering the View
• Auditing Logs
  • Managing the Audit Logs Table
    • Viewing Auditing Logs
    • Manually Emailing Auditing Logs
    • Exporting Auditing Logs
    • Refreshing the Auditing Logs
    • Displaying the Auditing Logs on the console
    • Auditing All Parameters During Addition
• Threat Logs
  • Viewing Threat Logs
  • Threat Log Functions
  • Display Options
• Tools and Monitor
• Using Packet Monitor
  • Benefits of Packet Monitor
  • How Does Packet Monitor Work?
  • Supported Packet Types
  • Configuring Packet Monitor
    • Configuring General Settings
      • Configuring General Settings
      • Configuring the Monitor Filter
      • Configuring Display Filter Settings
      • Configuring Logging Settings
      • Configuring Advanced Monitor Filter Settings
      • Configuring Mirror Settings
        • Starting and Stopping Packet Mirror
    • Monitoring Captured Packets
      • Starting and Stopping Packet Capture
    • Viewing Packet Monitoring Statistics
      • Capture Statistics
      • Local Mirror Statistics
      • Remote Mirror TX Statistics
      • Remote Mirror RX Statistics
      • FTP Statistics
      • Current Buffer Statistics
• Viewing Connections
  • Searching the Connections
  • Filtering the Connection Log
  • Connections Log Functions
• Monitoring Core 0 Processes
• Using Packet Replay
  • Single Packets
    • Packet Crafting
    • Packet Buffer
  • Replay Pcap File
    • Replaying an IP Pcap File
    • Replaying a MAC Pcap File
  • Captured Packets
    • About Captured Packets
    • Packet Detail
    • Hex Dump
• SonicWall Support
  • About This Document

Display Options

Customize the Events log to display as many or few columns that meet your needs.

To select which columns to display:

1. Navigate to MONITOR | Logs > System Logs.

2. Click Grid Settings icon . The Grid Settings dialog displays:

   

3. Select the items you want to appear as columns in the System Log.

   General	General information about the log event.
   	Time	Local date and time the event occurred. This option is selected by default. It is dimmed, and cannot be deselected.
   	ID	Identifying number for the event. This option is selected by default. It is dimmed, and cannot be deselected.
   	Category	Category of the event. This option is selected by default.
   	Group	Group designation of the event.
   	Event	Name of the event.
   	Msg Type	Type of message; usually Standard Message String.
   	Priority	Priority level of the event, such as Inform (information) or Error. This option is selected by default.
   	Message	Information about the event.
   Interface	Information about the protocol of the packet triggering the event.
   	Source	Name of the source device, if applicable. This option is selected by default.
   	Source IP	IP address of the source device.
   	Source Port	Port number of the source.
   	Source Interface	Source network and IP address, if applicable.
   	Destination	Name of the destination device, if applicable. This option is selected by default.
   	Destination IP	IP address of the destination device.
   	Destination Port	Port number of the destination.
   	Destination Interface	Destination network and IP address, if applicable.
   Protocol	Information about the NAT policy in effect, if any.
   	Source Name	Protocol source name.
   	Source NAT IP	Source address from the Source NAT IP address pool.
   	Source NAT Port	Port number for the Source NAT.
   	In SPI	Indicates whether the ingress packet is in Stateful Packet Inspection (SPI) mode, if applicable.
   	Destination Name	Protocol destination name.
   	Destination NAT IP	Destination address from the Source NAT IP address pool.
   	Destination NAT Port	Port number for the Destination NAT.
   	Out SPI	Indicates whether the egress packet is in Stateful Packet Inspection (SPI) mode, if applicable.
   	IP Protocol	Protocol used to send error and control messages, if known. This option is selected by default.
   	ICMP Type	ICMP packet’s ICMP type, if known.
   	ICMP Code	ICMP packet’s ICMP code, if known.
   Connection	Information about SPI, Access and IDP Rules, and policies, if any.
   	TX Bytes	Number of bytes transmitted.
   	RX Bytes	Number of bytes received.
   	Access Rule	Name of the Access Rule triggering the event, if any.
   	NAT Policy	Name of the NAT policy.
   	VPN Policy	Name of the VPN policy triggering the event, if any.
   	User Name	Name of the user whose action triggered the event.
   	Session Time	Duration of the session before the event.
   	Session Type	Type of session triggering the event.
   	IDP Rule	Name of the IDP Rule triggering the event, if any.
   	IDP Priority	Priority of the IDP Rule.
   Application	Information about the application being used.
   	HTTP OP	NPCS object op requestMethod HTTP OP code.
   	URL	URL of the NPCS object op requestMethod HTTP OP code.
   	HTTP Result	HTTP result code (such as, 200, 403) of Website hit rpkt cn1Label Packet received.
   	Block Category	Block category that triggered the event.
   	Application	The application being used.
   Others	Information about the user, session, and application, if known.
   	FW Action	Configured firewall action. If no action has been specified, displays N/A.
   	Notes	Includes notes. This option is selected by default.

4. When done, click Apply to preserve any changes or click Restore Default to revert back to the default settings.