topic Re: Import log file? in All Apps and Add-ons

Import log file?

pcsaeed — Mon, 28 Sep 2020 16:47:09 GMT

Can someone explain how i "Import MWGaccess3_for_MWG7.3-7.4.xml in MWG7 into the Default Log Handler - it will create a new log file with the required fields." because i'm clearly missing something simple?

Thanks in advance.

Saeed

Re: Import log file?

PavelP — Wed, 04 Jun 2014 20:27:58 GMT

Hello Saeed,

this App requires an access log file which is different from the default one. Instead of modifying the existing access.log we simply import a xml file which creates an another log for you and leaves your access.log untouched.

So log in on your MWG, create a configuration backup, then go to Policies > Rule Sets > Log Handler, right click on the "Default" > Add > Rule Set from Library. A new windows will appear where you click the button "Import from file", choose the xml file, click "Auto-Solve Conflicts..." > choose "Solve by referring to existing objects" and click OK and "Save Changes".

Screenshots:

   www.compek.net/Import_Rule_Set_from_Library.png
   www.compek.net/Import_Rule_Set_from_Library2.png
   www.compek.net/Import_Rule_Set_from_Library3.png

Additionally you can modify your setup as described in the documentation ("Adjust the app for your environment").

Let me know if you have further questions.

Regards

Re: Import log file?

pcsaeed — Thu, 05 Jun 2014 23:45:27 GMT

Cool Thanks!

Just one other question and I'm sure this is simple and I just can't find it.
I've setup the Web Gateway to send syslog to my splunk server. I've setup UDP to to listen for the MWGaccess3 source type.
What i'm not sure about is how to view the data using the app?
Sorry for the dumb questions. Your help is greatly appreciated.

Saeed

Re: Import log file?

pcsaeed — Thu, 05 Jun 2014 23:46:00 GMT

Cool Thanks!

Saeed

Re: Import log file?

pcsaeed — Fri, 06 Jun 2014 00:59:57 GMT

I think i fixed it
I added a syslog event (6) at the end of the "prepare gwaccess3.log" step.
Looks to be working.

Thanks for your help!

Re: Import log file?

PavelP — Fri, 06 Jun 2014 12:11:45 GMT

Hello Saeed, all right! I'll add a predefined syslog rule and a description in the new version.

Re: Import log file?

trross33 — Thu, 11 Feb 2016 15:52:01 GMT

Thank you for this PaveIP

Re: Import log file?

jbrocks — Fri, 03 Aug 2018 10:08:31 GMT

Hi,

old post, but I still got a question:
So the .xml -File must be imported in the MWG, NOT in the Splunk MWG AddOn? Am I right with that?