[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Log files
Look here, maybe you can locate something useful: http://www.rtek2000.com/Tech/I-SecureLinks4.html ********************************** Roman Zeltser, @National Computer Center, RSIS & DNE -----Original Message----- From: James M. Driskell [mailto:[email protected]] Sent: Monday, December 17, 2001 7:07 PM To: [email protected] Subject: Re: [FW-1] Log files Does anybody have a routing or application that will extract the log file to an ascii format without using the built-in fw logexport? Thanks, Jim Driskell Bob Webber/Markham/Contr/AT&T/IJV wrote: > Hi all: > > Have you tried running the reports on an exported log file? If you just do > the log switch, the data is still in a binary format. It might work if you > export the log files to ASCII (via fw logexport) and run the reports on > that data. > > Regards. > > Bob Webber > AT&T Global Network Services > Tel:> Fax:> Notes: Bob Webber/Markham/IBM@IBMCA > Internet: [email protected] > > "Logic merely enables one to be wrong with authority" - Doctor Who > > Steven Wu <[email protected]>@beethoven.us.checkpoint.com> on 12/07/2001 > 10:50:28 AM > > Please respond to Mailing list for discussion of Firewall-1 > <[email protected]> > > Sent by: Mailing list for discussion of Firewall-1 > <[email protected]> > > To: [email protected] > cc: > Subject: Re: [FW-1] Log files > > Is your rulebase log setting set to Account instead of Long ? > > I think fw.alog is for accounting log, which has extra column than the > normal > "Long" logs. In your requirement, you need to change your rulebase setting > on > log from "long" to "Account". Once it is set, then fw logswitch will > create > both fw.log and fw.alog for you. > > Steven > > Hans van den Boomen/ACAL/NL wrote: > > > Hi All, > > > > I want to make reports from my logs with the Checkpoint Reporting server. > I > > do this by performing a fw logswitch every first of the month. Then > copying > > the date.log and date.alog to the reporting server and generate a report > > from the files. > > > > The last fw logswitch didn't generate two files (date.log and date.alog) > > but only one ! ! > > The date.log file. > > > > I've done a fwstop to stop the CLM and copied all the files to a tmp > > directory. > > I rename the fw.alog to date.alog and then copied the date.log and > > date.alog to the reporting server. > > Also installing the consolidation policy goes ok. > > > > But when I create a report I only get the error message back no data > > available ! > > > > My question now is. > > > > Did anyone had the same problem ? If so how did you solve it ? > > > > Can I just copy the file and rename it ? If not what can I do ? > > > > Regards, > > > > Hans van den Boomen > > > > =============================================== > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > =============================================== > > =============================================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > =============================================== > > =============================================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > =============================================== ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= If you have any questions on how to change your subscription options, email Ron Alcatraz at: [email protected] ================================================= ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= If you have any questions on how to change your subscription options, email Ron Alcatraz at: [email protected] =================================================
|