Importing the old logs.

Vengatesh_SR — Mon, 25 Feb 2019 18:55:15 GMT

Hi Guys,

We have recently upgraded or device from R77.30 to R80, but old logs are not reflecting in our R80 smart console.

After research we got the article #sk111766. But we are un-sure what to give on the below step. It is asking <NUM_OF_DAYS_TO_INDEX>.

Import and index the offline logs from the last XX days:

[Expert@HostName:0]# cd $INDEXERDIR
[Expert@HostName:0]# ./log_indexer -days_to_index <NUM_OF_DAYS_TO_INDEX>

Can anyone help on to what the value should we give hear. And what is this "<NUM_OF_DAYS_TO_INDEX>" mean.

Regards,

Vengatesh SR

Re: Importing the old logs.

Maarten_Sjouw — Mon, 25 Feb 2019 21:57:05 GMT

Taken that most times the log file rotation is set on the by midnight timeframe, there would be at least 1 file per day. So when you copy those files over to the new R80 management server you would to set the number of days to the number calculated by:

(todays date) - (first date of imported files) so when you imported files starting at Feb 1st you should use the number 25

It will works it way back from the Feb 25th to Feb 1st, there will be a number of days (since your upgrade) that already have been indexed and they will be skipped.

Do keep in mind this is a very time consuming job and will not finish the same day when you have many files.

topic Re: Importing the old logs. in Firewall and Security Management

Importing the old logs.

Re: Importing the old logs.