About iankanderson

I'm able to get the following to work without issue: show log url query equal "user.src eq 'domain\username'" However it does not transfer cleanly to the ftp export. The ftp export command does not like "equal" after the query command. If I remove it the tab tab key entry provides me with additional options. Also the show log command does not require a time frame but the FTP does. So this works: show log url query equal "user.src eq 'domain\username'" And this does not ftp export log url query "src.user eq 'domain\username'" start-time equal 2013/07/05@00:00:00 end-time equal 2013/07/08@00:00:00 to ftp:username@destination I'm trying to avoid pulling logs for all users from the FW but it appears that may be my only choice. ... View more

I tried doing an export of one day and I'm still getting "mark exported failed" ... View more