Syslog-ng, MySql and Checkpoint Firewall-1 NG
Anyone sending their Checkpoint logs to a central syslog server running syslog-ng and logging to a MySql database? I may have to do this in the near future and was wondering if it's possible and what if any problems I can expect to encounter. Thanks! -Robin
--On Freitag, 6. Juni 2003 10:06 -0400 Robin Brown <robin_brown@totalcomm.com> wrote:
Anyone sending their Checkpoint logs to a central syslog server running syslog-ng and logging to a MySql database?
How do you want to export Check Point's FW-1 log lines to syslog? Afaik this isn't supported.
I may have to do this in the near future and was wondering if it's possible and what if any problems I can expect to encounter.
General support missing. Or do you want to do something like fw log -tfnl | while read line; do logger "$line"; done running? Or have you a program which has log access via OPSEC interface? Peter -- Dr. Peter Bieringer http://www.bieringer.de/pb/ GPG/PGP Key 0x958F422D mailto: pb at bieringer dot de Deep Space 6 Co-Founder and Core Member http://www.deepspace6.net/
Using 'fw log -ft' piped to a logger program which will then send to a syslog server. This would of course have to be used in the rule logging field or started when firewall-1 starts. -Robin -----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Dr. Peter Bieringer Sent: Friday, June 06, 2003 10:08 AM To: syslog-ng@lists.balabit.hu Cc: Robin Brown Subject: Re: [syslog-ng]Syslog-ng, MySql and Checkpoint Firewall-1 NG --On Freitag, 6. Juni 2003 10:06 -0400 Robin Brown <robin_brown@totalcomm.com> wrote:
Anyone sending their Checkpoint logs to a central syslog server running syslog-ng and logging to a MySql database?
How do you want to export Check Point's FW-1 log lines to syslog? Afaik this isn't supported.
I may have to do this in the near future and was wondering if it's possible and what if any problems I can expect to encounter.
General support missing. Or do you want to do something like fw log -tfnl | while read line; do logger "$line"; done running? Or have you a program which has log access via OPSEC interface? Peter -- Dr. Peter Bieringer http://www.bieringer.de/pb/ GPG/PGP Key 0x958F422D mailto: pb at bieringer dot de Deep Space 6 Co-Founder and Core Member http://www.deepspace6.net/ _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
participants (2)
-
Dr. Peter Bieringer
-
Robin Brown