Automate traffic log export to csv

[N2Z2]

Hi all,

I need to automate the export to csv for a specific query for traffic log, for example (zone.src eq myzone) and (time_generated in last-calendar-day) and I must have the same fields extracted from the gui, without limit to the rows retrieved.

I've tried to:

- export the command from cli to csv -> nothing useful

- create a custom report -> field are not the same, limit of 10k rows

- python script -> how can I pass the query to the instance of Firewall object with fw.op(...) ?

I can use a curl script, and it's working, but I hope for a more "elegant" solution

Any hint?

Thanks

[OtakarKlier]

Hello,

Best option would be to send the logs to a SIEM and run reports from there. There are free options out there.

Regards,

[N2Z2]

Hi, without entering into details, unfortunately that's not a method I can use.

Thanks