Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 19: Auditing and Reporting
Generating reports using the Admin Console
558
Generating exportable reports
The Sidewinder G2 allows you to create exportable data files from the report
data your site generates. This allows you to transfer files from the Sidewinder
G2, and load them into a database or spreadsheet application. You can export
data via FTP, e-mail, a diskette, or a DAT.
The report data that you can export from the Sidewinder G2 is located in the
/var/log/export_data directory unless you specify otherwise. The exportable
files include:
• probe_attempt
• acl_denied
• traffic
• root_access
• udb_action
Note: These data files have dates added to them that correspond to the dates the
files were created. Each file contains exportable Sidewinder G2 audit data that
corresponds to what is summarized in the respective Sidewinder G2 reports.
Enter the following commands at the UNIX prompt to generate exportable data
files:
• To create an exportable file in /var/log/export_data based on the previous
day’s audit information:
gen_reports -e -r all
This generates all reports in separate files.
• To create an exportable file in /var/log/export_data based on the latest
(current) traffic audit information:
gen_reports -f filename -r traffic
This generates all traffic reports in separate files with the specified filename
added to the front instead of the cf reports timestamp.