Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 3 subscribers
  • Views 7736 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

EMail-Alarm/Notification when Accessing a Specific Domain/URL?

UweT

Dear Folks

Long story short: I want to be informed via email every time a specific website is being accessed by a user, means when this domain is logged in the web filter log.

Is that possible? How?

Thank you very much!
Uwe



This thread was automatically locked due to age.
  • 0
    This isn't possible on the UTM itself. What you would need to do is to transfer the logs to a syslog server that supports scripted notifications, then you would be able to do so from there. You could also transfer the web filtering log via FTP or SMB, then write a script or program to parse through the raw log to look for the URL and email you when found.
  • 0 in reply to Scott_Klassen
    Thank you, Scott!

    I thought about that as a reasonable option. Guess it's the only one to forward the log to an external syslog server and post-process it.

    Can one automatically forward the entire daily web filter log to a server or does that auto-option only work "per log entry"?
  • 0
    Not sure what you mean.
    Syslog (Logging & Reporting > Log Settings > Remote Syslog Server) kind of acts like tail and new entries will be forwarded as they are created.
    Log Archiving will send the log from the previous day, all at once.

    Syslog would be the way to go if you want "live" notification of domain X access.