Using The Log2Action Utility To Export Logs; Using Filters - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Table of Contents

Advertisement

Network and Security Manager Administration Guide

Using the log2action Utility to Export Logs

790
Retry Count. Specifies the maximum number of retries to attempt before moving
on to the next log record.
Retry Interval (in seconds). Specifies the number of seconds until the action is
tried again.
You can also use a command line utility on the Device Server to export logs. To export
to XML, CSV, SNMP, Syslog, e-mail, or script format using the
Log in to the NSM Device Server as root.
1.
Change to the utility directory by typing: cd /usr/netscreen/DevSvr/utils.
2.
Specify the common filters, format, and format-specific filters for the format you
3.
want to export to:
sh devSvrCli.sh --log2action<common_filters>--action
<format><format_options>
The
utility exports all log records to the specified format. After executing the
log2action
action, the system generates an exit status code of 0 (no errors) or 1 (errors).
The following sections detail common filters, actions, and required and optional
format-specific filters.

Using Filters

The
utility generates data for a maximum of 100,000 logs.
log2action
NOTE: If you want to generate more than 100,000 logs, use the matches-to-return
option to specify the number of logs that you want.
Because of the large volume of logs potentially generated, it is highly recommended that
you specify filtering criteria when using the
report generates data from the earliest date in the log database and stops providing
output after 100,000 logs. In this case, it is possible that you may not get the action
output of your most recent data. Specifying a time filter is recommended in this situation.
Using Time Filters
For example, if you wanted to view data in the logs of 20060317, run the following
command:
./devSvrCli.sh --log2action --filter --log-id 20060317:0-20060317:4294967294
--action --xml --file-path /tmp/newtest.xml
If you wanted to view data for all logs from 2006/03/15 to 2006/03/17, run the following
command:
./devSvrCli.sh --log2action --filter --log-id 20060315:0-20060317:4294967294
--action --xml --file-path /tmp/newtest.xml
log2action
utility. Without filtering, the action
log2action
Copyright © 2010, Juniper Networks, Inc.
utility:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Network and security manager 2010.3

Table of Contents