NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Log files



Look here, maybe you can locate something useful:
http://www.rtek2000.com/Tech/I-SecureLinks4.html

**********************************
Roman Zeltser,
@National Computer Center,
RSIS & DNE



-----Original Message-----
From: James M. Driskell [mailto:[email protected]]
Sent: Monday, December 17, 2001 7:07 PM
To: [email protected]
Subject: Re: [FW-1] Log files


Does anybody have a routing or application that will extract the log file to
an
ascii format without using the built-in fw logexport?

Thanks,

Jim Driskell

Bob Webber/Markham/Contr/AT&T/IJV wrote:

> Hi all:
>
> Have you tried running the reports on an exported log file? If you just do
> the log switch, the data is still in a binary format. It might work if you
> export the log files to ASCII (via fw logexport) and run the reports on
> that data.
>
> Regards.
>
> Bob Webber
> AT&T Global Network Services
> Tel:> Fax:> Notes: Bob Webber/Markham/IBM@IBMCA
> Internet: [email protected]
>
> "Logic merely enables one to be wrong with authority" - Doctor Who
>
> Steven Wu <[email protected]>@beethoven.us.checkpoint.com> on 12/07/2001
> 10:50:28 AM
>
> Please respond to Mailing list for discussion of Firewall-1
>       <[email protected]>
>
> Sent by:  Mailing list for discussion of Firewall-1
>       <[email protected]>
>
> To:   [email protected]
> cc:
> Subject:  Re: [FW-1] Log files
>
> Is your rulebase log setting set to Account instead of Long ?
>
> I think fw.alog is for accounting log, which has extra column than the
> normal
> "Long" logs. In your requirement, you need to change your rulebase setting
> on
> log from "long" to "Account". Once it is set,  then fw logswitch will
> create
> both fw.log and fw.alog for you.
>
> Steven
>
> Hans van den Boomen/ACAL/NL wrote:
>
> > Hi All,
> >
> > I want to make reports from my logs with the Checkpoint Reporting
server.
> I
> > do this by performing a fw logswitch every first of the month. Then
> copying
> > the date.log and date.alog to the reporting server and generate a report
> > from the files.
> >
> > The last fw logswitch didn't generate two files (date.log and date.alog)
> > but only one ! !
> > The date.log file.
> >
> > I've done a fwstop to stop the CLM and copied all the files to a tmp
> > directory.
> > I rename the fw.alog to date.alog and then copied the date.log and
> > date.alog to the reporting server.
> > Also installing the consolidation policy goes ok.
> >
> > But when I create a report I only get the error message back no data
> > available !
> >
> > My question now is.
> >
> > Did anyone had the same problem ? If so how did you solve it ?
> >
> > Can I just copy the file and rename it ? If not what can I do ?
> >
> > Regards,
> >
> > Hans van den Boomen
> >
> > ===============================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > ===============================================
>
> ===============================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ===============================================
>
> ===============================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ===============================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.