Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
CPk3ra
Contributor

Log Exporter - additional fields

Dear Checkmates,

 

 

Can you please help me with configuration of some extra fields to be exported to our syslog  via cp_log_exporter ?  I’ve a requirement that also  in the log received by syslog to see “bytes in/out “ 

 

Checking the sk122323

Steps:

a) On my MDS under the specific domain I location I modify following file: targetConfiguration.xml

  • <mappingConfiguration>  fieldsMapping.xml  </mappingConfiguration>

<exportAllFields> false</exportAllField

b)  In file: fieldsMapping.xml

 

<field>

<exported>true</exported>

<required>true</required

    <origName>src</origName>

    <dstName>cef_src</dstName>

  </field>

  <field>

<exported>true</exported>

<required>true</required

    <origName>dst</origName>

    <dstName>cef_dst</dstName>

  </field>

<field>

<exported>true</exported>

<required>true</required

    <origName>sent_bytes</origName>

    <dstName>sent_bytes</dstName>

  </field>

  <field>

<exported>true</exported>

<required>true</required

    <origName>received_bytes</origName>

    <dstName>received_bytes</dstName>

  </field>

  <table>

 

But still – it does not work.
Log fields mapping can be found here :  sk144192

 

 

  1. Restart cp_log_export.
0 Kudos
3 Replies
PhoneBoy
Admin
Admin

My understanding is this a new log entry is sent every 10 minutes or so with the bytes in/out, assuming either accounting is enabled or the rule used App Control with Detailed or Extended logs. 
The initial log entry certainly won’t have it…by design.

CPk3ra
Contributor

thanks PhoneBoy - indeed accounting does enable the packet/bytes in/out and are visible in syslog. What about other "fields" - how can I customize the log output ?

0 Kudos
PhoneBoy
Admin
Admin

As far as I know, it should export more or less everything by default.
What precise fields are missing from the output?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events