reading logs to clear text 1

[astin]

hello guys
please can someone let me know if there is a way to output the log files gathered from checkpoint firewall (Im running 4.1on a Nokia IP machine) so that they are clear text.
I would like to run a sed program on it
Thanks
A

 

[Piloria]

on an old log (not your current if you need that do an fw logswitch)

fw logexport -d, -i logname.log -o logname.txt

the logname must contain the full path or run the command in the log directory using the full path to the fw command (in the \bin directory)

 

[astin]

Piloria,

Thank you that was very helpful indeed.
However if I do need to use the current log, do i simply replace type fwlogswitch instead of fw logexport - I would test this here, but it is a production firewall - so i have to be careful.

 

[Piloria]

no to do a fw logswitch type
fw logswitch logname
this will then start a new log file and give you an old one with the name logname.log

 

[astin]

thanks ever so much