topic Re: Smart Console Log Export without SmartEvent in Firewall and Security Management

Smart Console Log Export without SmartEvent

00071491 — Thu, 31 Mar 2022 21:14:45 GMT

Hi All,

Running a Clustered pair of 5600 appliances on R80.40.

From SmartConsole > Logs & Monitoring, I filter down a log using the following for the last 30 days:

user:username blade:"URL Filtering"

I want to export the results using Menu > File > Export to Excel CSV, but I'm only given a few results in the file. From SmartConsole I can keep scrolling and see all of the results as intended. I don't see the same numbers of results in the CSV.

We don't have Smart Event activated to get a report in that manner. Unsure if that's a licensing fee to add that?

Any ideas on the best way to generate 30-days of URL Filtering results for a user?

Rory

Re: Smart Console Log Export without SmartEvent

K_montalvo — Thu, 31 Mar 2022 21:31:55 GMT

Hello

I tried it the same way than you and got the exact results that's shows up on the Logs and monitoring tab. What application are you using to open the .csv exported file?

Re: Smart Console Log Export without SmartEvent

PhoneBoy — Fri, 01 Apr 2022 01:22:11 GMT

https://mgmt-ip/smartview

From there you can export up to a million log entries.
The fact you can only export the visible log lines from SmartConsole is a known limitation.

Re: Smart Console Log Export without SmartEvent

00071491 — Fri, 01 Apr 2022 01:32:03 GMT

Using Microsoft Excel to view the CSV....in your search results...scroll down to show more results then export. You'll find everything you scrolled passed will be blank lines in your CSV file and only show you the logs for what's visible in the GUI window.

Re: Smart Console Log Export without SmartEvent

00071491 — Fri, 01 Apr 2022 01:34:18 GMT

Good to know on the known limitation. I'll try the link you provided using our mgmt IP. We only have read-only access to our management and log servers, but I'll report back tomorrow on results. Thank you.

Re: Smart Console Log Export without SmartEvent

the_rock — Fri, 01 Apr 2022 02:15:25 GMT

@PhoneBoy is 100% correct. I actually exported logs from my lab mgmt for 3 months and it had about 500000 lines.

Andy

Re: Smart Console Log Export without SmartEvent

00071491 — Fri, 01 Apr 2022 13:27:01 GMT

Thank you again. Going through the web worked like a charm!