This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to export the web filter log of the last few weeks

Hello everybody,

I need to evaluate the web filter logging. At the moment I go to log viewer in the upper right corner of the web browser, scroll all the way down, which takes a lot of time, and then click the download button. Is there a faster way? Can I download the log file from the firewall's log-directory via SCP? If so, what is the filename? Or is the information stored in a database?

I also noticed that there are only a few days in the log. But I need a longer period of time. Are there archived log-files available?

The Version is SFOS 17.5.12 MR-12.

Thank you in advance for your support
HAL9000

This thread was automatically locked due to age.

0 dirkkotte over 5 years ago

Check this manuals:

Sophos XG Firewall: Logfile guide
https://community.sophos.com/kb/en-us/132211

Sophos XG Firewall: Where to find log files?
https://community.sophos.com/kb/en-us/123185

Sophos XG Firewall: How to extract files from Sophos XG Firewall
https://community.sophos.com/kb/en-us/123337

There is an possibility to download Files directly via Webbrowser from WebAdmin ... be carefull ...

Sophos XG Firewall: How to capture packets and download the Packet Capture
https://community.sophos.com/kb/en-us/127647
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to dirkkotte

XG does not save the Webaccess Logs in plain text files on the /log/ directory. For this, you would need to enable Debug Mode, which will enable the access filtering on Log.

Whats the use case of exporting the Log files?
Wouldnt be a Syslog Server a better option?
Cancel
Vote Up 0 Vote Down

Cancel
0 HAL9000 over 5 years ago in reply to LuCar Toni

We have to evaluate the logs because we have to investigate a case of working time fraud (private internet use). Therefore we need data from the past.

Can we somehow still access the data from the past? If we switch on the debug mode now, it will probably not help.

The use of a syslog server is planned for the future.
Cancel
Vote Up 0 Vote Down

Cancel