topic Re: Best way to query export logs in General Topics

Best way to query export logs

sonet — Thu, 02 Sep 2010 13:28:39 GMT

Hello,

Does anyone have any suggestions on how to lookup or query all the exported logs? Currently I export all four logs to a NAS, but how do I query all those csv files collectively, say looking for the activity of a user?

Thanks

Re: Best way to query export logs

solsen — Thu, 02 Sep 2010 14:16:42 GMT

Hi!

Why not just use grep/find depending if you use Linux or Windows.

Another option would be Notepad++ if you want a graphical interface.

Best regards Staffan Olsen

staffan@Radpoint.se

Sent from mobile phone.

Re: Best way to query export logs

keith_whitley — Thu, 02 Sep 2010 14:21:11 GMT

A pretty good tool for searching if you are using windows and want a grep functionality is Astrogrep... it is free.

http://astrogrep.sourceforge.net/

This will allow you search entire directories and multiple files within them simultaneously.

Re: Best way to query export logs

sonet — Thu, 02 Sep 2010 18:36:58 GMT

Thanks for the suggestions. I already use a similar tool called BareMetalGrep.

I'm looking for the kind of functionality you get with a user report on the monitor page. Searching works but I need to extract info from all the csv files and produce a single output. Preferably in pdf format. For example, search on a username/threat/deny action and produce a report on the results.

Hope this makes better sense.