Scheduled Log Export based on custom queries

anishuthuman — Mon, 28 Feb 2022 06:11:44 GMT

Is there any option to schedule custom traffic reports based on custom queries and to get it exported automatically .?

Currently, we are exporting the traffic logs manually from Monitor > Logs >Traffic and pasting the queries ( some of the sample queries is mentioned below) in the search bar (apply filter) and export as csv file .

We have many queries like below to export ..Kindly provide any option for scheduled export ..

example of some custom query is given below :

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and (( natdst eq 172.22.123.12 ) or ( addr.dst in 172.22.123.12 ))

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and ( addr.dst in 172.22.114.10 )

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and (( natdst eq 172.22.113.19 ) or ( addr.dst in 172.22.113.19 ))

Re: Scheduled Log Export based on custom queries

kiwi — Mon, 28 Feb 2022 09:53:42 GMT

Hi @anishuthuman ,

You can create a custom report (Monitor > Manage Custom Reports) and add your filters or create new ones using the 'query builder':

Once created, you can add it to a report group (Monitor > PDF Reports > Report Group) and add the report group to an Email Scheduler (Monitor > PDF Reports > Email Scheduler).

Or if you don't want to create an email scheduler for it you can, once it's created and ran for a first time check it under 'Monitor > Reports'

Config Custom Reports

Hope this helps,

-Kiwi.

topic Scheduled Log Export based on custom queries in General Topics

Scheduled Log Export based on custom queries

Re: Scheduled Log Export based on custom queries