Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 756 / 1026

Table 83: Management System Utilities (continued)
Description Name
Exports Audit Log data to a csv file or Syslog server.
CSV Command Usage:
For csv file, issue the csv command: ./xdbAuditLogConverter.sh
<xdb root> csv [csv full file path]
For example, . /xdbAuditLogConverter.sh
/usr/netscreen/GuiSvr/var/xdb csv /tmp/audit.csv
This creates a file called
audit.csv
in the /tmp directory with audit
logs in csv format. If the csv file path is not specified, audit logs in
csv format are written to a default file called
auditlog.csv in the
current directory.
Syslog Command Usage:
To export data to a Syslog server, issue the syslog command: .
/xdbAuditLogConverter.sh <xdb root> syslog [remote IP Address]
For example, ./xdbAuditLogConverter.sh
/usr/netscreen/GuiSvr/var/xdb syslog 172.23.9.94
If you want to syslog to the host machine on which you are running
this command, do not specify an IP address. For example,
./xdbAuditLogConverter.sh /usr/netscreen/GuiSvr/var/xdb syslog
xdbAuditLogConverter.sh
In NSM, enhancements to the audit log exporter tool allow you to:
•
Invoke detailed help messages from the audit log exporter tool with
./.xdbAuditLogConverter- - help
• Use - -showdiff to view audit log details before and after a modification. This feature
is only supported on objects such as addresses, NAT, VLAN objects, access profiles,
VSYS profiles and so on. It is not supported on policies.
• View details about modifications to objects (add, delete, modify actions) in the audit
log output. For example,
ACTION=delete,ADMIN=super,DEVICE=,TARGET=addressObj/address/global,TIME=Tue
Dec 30 11:02:49 2008
•
Filter exported audit log data according to Date/Time and Date/Time Range, Device,
Action, Admin, Domain, Working Domain. Multiple filters are also allowed. For example,
./.xdbAuditLogConverter <xdb path> <csv|syslog> [CSV full filepath | Remote IP
Address] - -domain=<domain id> - -device =<device name>
Using Schema Information
From NSM, you can select Schema Information to view current and running schema and
update schema for devices whose schema are defined using XML.
Copyright © 2010, Juniper Networks, Inc. 706
Network and Security Manager Administration Guide