Forum Discussion

Moinul_Rony's avatar
Moinul_Rony
Icon for Altostratus rankAltostratus
Jan 26, 2015

How to do get the ASM proxy log via command line?

Hi we have decided recently to enable few attack specific Signature in Transparent mode in some of our ASM policies. Now that we can scanned for a week we want to export the request / proxy logs and hand them over to dev team so that we can apply the signature set in blocking mode.

 

I have tried to export them via the Web interface but apache died/ Mysql query going in to time out. I had to to a bigstart restart httpd tomcat to bring it back.

 

Any way we can export the logs without putting any pressure on the CPU or MySQL? Does asmqkview --proxy-log do any CSV format export of the logs and should it be less CPU intensive?

 

Many thanks.

 

ASM Advanced WAF
security

2 Replies

Sort By
  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus
    Jan 27, 2015

    as @arnaud said, /var/log/asm may have what you're looking for - it's not identical to the SQL db logs, but should have most if not all of the violations. also, it's handy to have that information remotely logged, too, as that gives you more historical data and will allow you to consolidate ASM messages from multiple devices into one location