Importing Log Files

The Import Log Files link lets you import a log file from the local machine or remotely, through FTP. The Imported Log Files page shows you the list of log files imported, along with details such as the host from which it was imported, and the status of the import. Importing of archived files (.gz format) created by Firewall Analyzer and zipped log files (.zip format) are also supported.

Use this option to import log files from squid proxy servers.

Click the icon to delete an imported log file from the database.

Importing a Log File

1. Click the Import Log File link to import a new log file.
   
2. Choose Local Host if the log file is present in the local machine from which you are accessing the Firewall Analyzer server. Click Browse to locate the log file.
   
3. The option Ignore UnParsed/Junk Record(s) enables the Firewall Analyzer to skip those records in the imported log file, that are in unsupported format and continue with parsing the subsequent supported records in the file. If not selected, the Firewall Analyzer will not parse the entire log file even if one record contains unsupported log format. Then click Import to import the log file into the database.
4. Choose Remote Host if you need to import the particular log file or the entire directory containing the log files from a remote location on the network.
   1. Enter the remote host's hostname or IP address, and the FTP user name and password.
   2. Enter the time interval (in minutes) after which Firewall Analyzer should retrieve new log files.
   3. Select the Ignore UnParsed/Junk Record(s) option as per requirement.
   4. Enter the location on the remote machine where the log file or the entire directory containing the log files is present. You can click the List Remote Files/Directories link to locate the file on the remote computer.
   5. Select the Change filename dynamically option, if you want to import the Micosoft ISA Proxy log files.
      
5. Finally click Import to import the log file into the database.

If you have selected the Ignore UnParsed/Junk Record(s) while importing the logs, the records will not be shown when the icon is clicked on the sub tab.

Micosoft ISA Proxy creates log file with new name (with time stamp appended) everyday. If the Micosoft ISA Proxy log files are to be imported, you do not have to change the filename daily, instead select the Change filename dynamically option while importing the logs. Selecting the option displays the the Filename pattern: text box to enter the time stamp pattern that the Proxy server appends when the Proxy server creates the log file daily. A help tip icon displays, (when you hover the mouse on the icon) the mapping of the Timestamp in Filename to the Pattern to be given. Enter the pattern as required.

The supported formats for imported log files is shown below the Location box. We also support importing of archived files (.gz format) created by our Firewall Analyzer.

If you are importing an unsupported log file, a warning message is shown. You can still import the file, but records will show up when the icon is clicked on the sub tab.

The time taken to import a log file depends on its file size. Once the file has been imported successfully, the device from which it was imported is listed in the appropriate category, and the reports are generated automatically.

The Imported Log Files table shows the list of all log files imported so far. In this list, the latest imported log file will appear on the top. The number of imported log files listed per page can be seleted (5, 10, 20. 50, 100). The icon is displayed if logs have been imported from the local machine. The icon is displayed if logs have been imported from a remote machine. Click this icon to see the remote host details, and file details for the log file imported. Click the toggle icon to enable or disable collecting logs from this device after the specified time interval. Click the icon to delete all log files imported from this device.