Actions
Feature #6215
closedflow/output: log triggered exception policy
Effort:
Difficulty:
Label:
Description
A compliment to exception policy stats counters [1], we have some customers that would find it valuable to support logging some information on flows that caused exception policies to be triggered. This is most useful for the midstream policy, where users are interested in identifying the flows that matched the policy so that they can troubleshoot common causes such as asymmetric routing in their network. It may be useful for other exception policies as well, but we don't have as clear of an immediate use case for those.
This might make sense as either a flow log output or an alert log output.
Actions