[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] Log file Rollover
From:       James Lee Bell <nuclear-cowboy () COX ! NET>
Date:       2002-08-30 9:00:49
[Download RAW message or body]

Here's what I had set up on a similar environment:
1) set up at jobs to run "fw logswitch" a couple times a day. This
renames the current fw.log and fw.alog files to something along the
lines of (using this morning's date and a time) 30aug2002-015500am.log,
and opens blank fw.log/alog files for fw1 to use.

2) run "fw logexport -n " once in a while. I built a really
simple/stupid batch file to run it considering because of (1) above the
files were named exactly.  My batch file simply took an argument of the
3-char month (eg. "aug"), and then iterated through every possible day
of the month and through the 2 times of day I rolled them over (8am,
5pm), and ran "fw logexport" on them, changing the file names to
something more sortable like "aug302002-080000.log".  Logexport dumps
the proprietary format log files into csv format files, which zip up
fairly well.

3) Zip up and transfer the exported logs as needed via FTP.

Lenny Sanchez wrote:

> Could someone please explain to me what is the exact procedure to
> remove log files off my management station.  If I run fw logswitch, it
> just writes a 1 or 2 kb file.  Not sure what arguments coincide with
> this command.  I have about 2Gigs of log file data, which has left my
> management station with about 50 MB of disk space left.  Suffice to
> say, these log files haven't been rolled over in about 2 or 3 years.
> I'm running fw-1 4.1 SPK 5 on a NT 4.0 SPK 6 machine.  Also, this box
> has limited networking capabilities.  Any file transfers off this
> machine, will have to be done through ftp.
>
> Thanks
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================
[prev in list] [next in list] [prev in thread] [next in thread]