topic Automate traffic log export to csv in General Topics

Automate traffic log export to csv

N2Z2 — Mon, 06 Jun 2022 14:36:25 GMT

Hi all,

I need to automate the export to csv for a specific query for traffic log, for example (zone.src eq myzone) and (time_generated in last-calendar-day) and I must have the same fields extracted from the gui, without limit to the rows retrieved.

I've tried to:

- export the command from cli to csv -> nothing useful

- create a custom report -> field are not the same, limit of 10k rows

- python script -> how can I pass the query to the instance of Firewall object with fw.op(...) ?

I can use a curl script, and it's working, but I hope for a more "elegant" solution

Any hint?

Thanks

Re: Automate traffic log export to csv

OtakarKlier — Mon, 06 Jun 2022 16:20:19 GMT

Hello,

Best option would be to send the logs to a SIEM and run reports from there. There are free options out there.

Regards,

Re: Automate traffic log export to csv

N2Z2 — Tue, 07 Jun 2022 13:05:56 GMT

Hi, without entering into details, unfortunately that's not a method I can use.

Thanks