|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Log files
Hi all: Have you tried running the reports on an exported log file? If you just do the log switch, the data is still in a binary format. It might work if you export the log files to ASCII (via fw logexport) and run the reports on that data. Regards. Bob Webber AT&T Global Network Services Tel:Fax:Notes: Bob Webber/Markham/IBM@IBMCA Internet: [email protected] "Logic merely enables one to be wrong with authority" - Doctor Who Steven Wu <[email protected]>@beethoven.us.checkpoint.com> on 12/07/2001 10:50:28 AM Please respond to Mailing list for discussion of Firewall-1 <[email protected]> Sent by: Mailing list for discussion of Firewall-1 <[email protected]> To: [email protected] cc: Subject: Re: [FW-1] Log files Is your rulebase log setting set to Account instead of Long ? I think fw.alog is for accounting log, which has extra column than the normal "Long" logs. In your requirement, you need to change your rulebase setting on log from "long" to "Account". Once it is set, then fw logswitch will create both fw.log and fw.alog for you. Steven Hans van den Boomen/ACAL/NL wrote: > Hi All, > > I want to make reports from my logs with the Checkpoint Reporting server. I > do this by performing a fw logswitch every first of the month. Then copying > the date.log and date.alog to the reporting server and generate a report > from the files. > > The last fw logswitch didn't generate two files (date.log and date.alog) > but only one ! ! > The date.log file. > > I've done a fwstop to stop the CLM and copied all the files to a tmp > directory. > I rename the fw.alog to date.alog and then copied the date.log and > date.alog to the reporting server. > Also installing the consolidation policy goes ok. > > But when I create a report I only get the error message back no data > available ! > > My question now is. > > Did anyone had the same problem ? If so how did you solve it ? > > Can I just copy the file and rename it ? If not what can I do ? > > Regards, > > Hans van den Boomen > > =============================================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
