• State Not Answered
  • Replies 10 replies
  • Subscribers 14 subscribers
  • Views 5488 views
  • Users 0 members are here
Options
Related

export Repository Data

eddie.rodriguez
over 3 years ago

We gather logs from over 5000 window servers into an Intrust Repository.

I was asked if there is a way to export maybe a days' worth of let's say security logs into a XML or .csv file format from the repository?

Thanks

Eddie

Parents
  • 0 over 3 years ago

    Hi, the easiest way to export into CSV would be to just use Repository Viewer, just create a search that looks like something you want to export and use "Report... > Save Report..." menu item, keep in mind that you will need to disable limit if you want to export all of the items that go through your filters

    But what I would actually ask when someone is asking for information like that - how is this information intended to be used? Because InTrust is capable of scheduled SQL import as well as event forwarding via syslog, so if the data is needed on a regular basis, I would create a continuous export or forwarding.

    Thanks.

  • 0 over 3 years ago in reply to Sergey.Goncharenko

    Thanks for the info... I may have over 4000 servers to query from so, I think it would take a while to run via repository viewer... Is there a command-line command or script that can replicate the option in repository viewer... this data would be historical data and nothing current.

  • 0 over 3 years ago in reply to eddie.rodriguez

    The question of what data do you want - e.g. Windows Security Log and what do you intended to do with it - i.e. what kind of "reports" do you want to generate will guide your approach here.

    "Normally", when someone wanted to analyze bulk data collected into the Repository, you would run an "import job" to bring the data into a SQL Audit DB and then you could mine it and / or export it from there.  That's all out-of-the-box functionality in the InTrust Manager.

  • 0 over 3 years ago in reply to JohnnyQuest

    Thanks for the info... They are only looking at downloading only security logs for a particular date then upload to a report server.. not Intrust.... I work for the federal government that this is what they are trying to do...

Reply Children