SMB security log files

G_W_Albrecht — Thu, 02 Aug 2018 12:02:32 GMT

The SMB locally managed appliances have a nice log interface, similar to SmartLog. But it is not possible to export the security logs to a text file as commands fw log or fwm logexport are not available on Embedded GAiA. But we can do that easily if we have a GAiA SMS available:

- from the /var/log/log/local/0/ directory we copy the file cp.log

- we rename it to e.g. 2018-01-01-750000.log (it is important to adhere to this naming convention)

- we copy this file to GAiA SMS directory /opt/CPsuite-R80.20/fw1/log/

- we issue the command fw repairlog /opt/CPsuite-R80.20/fw1/log/2018-01-01-750000.log to rebuild the pointer files

- after that, it is possible to use SmartLog on the file when it is opened

- also SmartView Tracker can open the file and export it as text

- commands fw log and fwm logexport are now available

But be carefull: After opening the file in SVTracker and exporting, it will vanish from the log folder...

topic SMB security log files in Spark Firewall (SMB)

SMB security log files