Log Exporter - Gateway Specific option

[Veeraselvam_man]

Hi all,

I am using a third-party tool to generate bandwidth reports using Syslog data, We are managing 6 gateways in the management server, Is there any way to send the selected gateway's Syslog data into a third-party tool using "cp_log_export " command?

Currently, we are using the below command to send the Syslog data to the third party tool :
cp_log_export add name <name> target-server <Firewall Analyzer IP address> target-port 1514 protocol udp format cef

The problem is above command sending all the gateway Syslog data into a third-party tool.

Regards,
Veera

[Eduardo_Eiros]

Hi

You will have to use the filter configuration file located under each deployment folder: $EXPORTERDIR/targets/<deployment-name>/conf/FilterConfiguration.xml

Something like this should work, using the Main IP of selected gateways

<filters>
<filterGroup operator="and">
<field name="action" operator="and">
</field>
<field name="origin" operator="or">
<value operation="eq">1.2.3.1</value>
<value operation="eq">1.2.3.2</value>
</field>
<field name="product" operator="and">
</field>
</filterGroup>
</filters>

Regards