How can we resend the history firewall traffic logs to Splunk Index

[Enzooo_PHN]

I previously configured the firewall log to send to Splunk, but we faced something issue with the reception of Splunk, so it took us about a few weeks to fix this Splunk issue, so I couldn't find the firewall logs in Splunk during this time, and I know that our logs have been kept intact in the smart-1 log server (R81.10), so I'm wondering is there have any way for us to resend this history log back into Splunk.

[Ruan_Kotze · Accepted solution]

Hey there,

You can run log exporter with the 'reexport' flag.  Have a look at sk122323.

Cheers,
Ruan

[Enzooo_PHN]

Hi, Ruan,
Thanks, it does open my mind, but I was wondering, what is the format of the "start-position &end-position" parameter inside the reexport command? Are there any examples to refer to?