By default, all log information for IP Filter is recorded by syslog. It is good practice to create a log file to record IP Filter traffic information separately from other data that might be logged in the syslog log file.
Before You Begin
You must assume the root role.
% svcs system-log STATE STIME FMRI disabled 13:11:55 svc:/system/system-log:rsyslog online 13:13:27 svc:/system/system-log:default
# Save IP Filter log output to its own file local0.debug /var/log/log-name
# touch /var/log/log-name
# svcadm refresh system-log:default
The following example shows how to create ipmon.log to archive IP Filter information.
Edit the syslog.conf.
pfedit /etc/syslog.conf ## Save IP Filter log output to its own file local0.debug<Tab>/var/log/ipmon.log
Then, on the command line, create the file and restart the service.
# touch /var/log/ipmon.log # svcadm restart system-log