Time filtering fw1-loggrabber

[okatsladz454]

Good afternoon.

The task is to create a time filter for collecting logs from a certain date (14 days before the collection is initiated) in the LEA log collection system.

Please tell me which filtering parameters and how to change them in fw1-loggrabber.conf in order to implement this mechanism?

Examples from fw-loggrabber.conf file (is there any chance of getting a complete list of possible filters) :

# FW1_FILTER_RULE=<rule>
#FW1_FILTER_RULE="action=drop"

# AUDIT_FILTER_RULE=<rule>
#AUDIT_FILTER_RULE="action=accept"

PS: please do not suggest switching to LogExporter, We can not implement it.

[okatsladz454]

https://github.com/certego/fw1-loggrabber/blob/master/fw1-loggrabber.conf

loggrabber conf Example, which i want to use to solve this task