<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Log Exporter - Gateway Specific option in API / CLI Discussion</title>
    <link>https://community.checkpoint.com/t5/API-CLI-Discussion/Log-Exporter-Gateway-Specific-option/m-p/121997#M5943</link>
    <description>&lt;P&gt;Hi all,&lt;BR /&gt;&lt;BR /&gt;I am using a third-party tool to generate bandwidth reports using Syslog data, We are managing 6 gateways in the management server, Is there any way to send the selected gateway's Syslog data into a third-party tool using "cp_log_export " command?&lt;BR /&gt;&lt;BR /&gt;Currently, we are using the below command to send the Syslog data to the third party tool :&lt;BR /&gt;cp_log_export add name &amp;lt;name&amp;gt; target-server &amp;lt;Firewall Analyzer IP address&amp;gt; target-port 1514 protocol udp format cef&lt;BR /&gt;&lt;BR /&gt;The problem is above command sending all the gateway Syslog data into a third-party tool.&lt;/P&gt;&lt;P&gt;Regards,&lt;BR /&gt;Veera&lt;/P&gt;</description>
    <pubDate>Thu, 24 Jun 2021 08:17:41 GMT</pubDate>
    <dc:creator>Veeraselvam_man</dc:creator>
    <dc:date>2021-06-24T08:17:41Z</dc:date>
    <item>
      <title>Log Exporter - Gateway Specific option</title>
      <link>https://community.checkpoint.com/t5/API-CLI-Discussion/Log-Exporter-Gateway-Specific-option/m-p/121997#M5943</link>
      <description>&lt;P&gt;Hi all,&lt;BR /&gt;&lt;BR /&gt;I am using a third-party tool to generate bandwidth reports using Syslog data, We are managing 6 gateways in the management server, Is there any way to send the selected gateway's Syslog data into a third-party tool using "cp_log_export " command?&lt;BR /&gt;&lt;BR /&gt;Currently, we are using the below command to send the Syslog data to the third party tool :&lt;BR /&gt;cp_log_export add name &amp;lt;name&amp;gt; target-server &amp;lt;Firewall Analyzer IP address&amp;gt; target-port 1514 protocol udp format cef&lt;BR /&gt;&lt;BR /&gt;The problem is above command sending all the gateway Syslog data into a third-party tool.&lt;/P&gt;&lt;P&gt;Regards,&lt;BR /&gt;Veera&lt;/P&gt;</description>
      <pubDate>Thu, 24 Jun 2021 08:17:41 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/API-CLI-Discussion/Log-Exporter-Gateway-Specific-option/m-p/121997#M5943</guid>
      <dc:creator>Veeraselvam_man</dc:creator>
      <dc:date>2021-06-24T08:17:41Z</dc:date>
    </item>
    <item>
      <title>Re: Log Exporter - Gateway Specific option</title>
      <link>https://community.checkpoint.com/t5/API-CLI-Discussion/Log-Exporter-Gateway-Specific-option/m-p/122031#M5944</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;You will have to use t&lt;SPAN&gt;he filter configuration file located under each deployment folder:&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;$EXPORTERDIR/targets/&amp;lt;deployment-name&amp;gt;/conf/FilterConfiguration.xml&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Something like this should work, using the Main IP of selected gateways&lt;/P&gt;&lt;P&gt;&amp;lt;filters&amp;gt;&lt;BR /&gt;&amp;lt;filterGroup operator="and"&amp;gt;&lt;BR /&gt;&amp;lt;field name="action" operator="and"&amp;gt;&lt;BR /&gt;&amp;lt;/field&amp;gt;&lt;BR /&gt;&amp;lt;field name="origin" operator="or"&amp;gt;&lt;BR /&gt;&amp;lt;value operation="eq"&amp;gt;1.2.3.1&amp;lt;/value&amp;gt;&lt;BR /&gt;&amp;lt;value operation="eq"&amp;gt;1.2.3.2&amp;lt;/value&amp;gt;&lt;BR /&gt;&amp;lt;/field&amp;gt;&lt;BR /&gt;&amp;lt;field name="product" operator="and"&amp;gt;&lt;BR /&gt;&amp;lt;/field&amp;gt;&lt;BR /&gt;&amp;lt;/filterGroup&amp;gt;&lt;BR /&gt;&amp;lt;/filters&amp;gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;</description>
      <pubDate>Thu, 24 Jun 2021 12:28:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/API-CLI-Discussion/Log-Exporter-Gateway-Specific-option/m-p/122031#M5944</guid>
      <dc:creator>Eduardo_Eiros</dc:creator>
      <dc:date>2021-06-24T12:28:03Z</dc:date>
    </item>
  </channel>
</rss>

