Tuesday, January 25, 2011

How do I Rotate the Audit Logs in FireWall-1 NG

The VPN-1/FireWall-1 NG audit log type files are:
        
           xx.adtlog - stores the audit log records.
           xx.adtlogptr - provides pointers to the beginning of each log records.
           xx.adtloginitial_ptr - provides pointers to the beginning of each log chain (logs that shared the same  
           connection ID - LUUID). 
           xx.adtlogaccount_ptr - provides pointers to the beginning of each accounting record.
 
To purge/delete the current audit log files without saving it to a backup file, run:
# fw logswitch -audit ""
To logswitch and save the logs to a file, run:
# fw logswitch -audit
Example :
 
# fw logswitch -audit
 Trying to switch audit logfile to 2002-06-07_150016.adtlog
 Log File was switched to : 2002-06-07_150016.adtlog

No comments: