How do I specify several days of log files in the log file path, using date macros with a pipe (|) character?


This article applies to:

  • Firewall Suite 4.X

Question:

How do I specify several days of log files in the log file path, using date macros with a pipe (|) character?

Symptoms:

  • Some daily reports are missing.
  • Profile is configured to analyze yesterday's log file, and analyzes once each day.

Causes:

When a profile is configured to access yesterday's log file via FTP, and if the FTP client is unsuccessful in accessing that log file, a result could be 'missing days' in your WebTrends reports.

Procedure:

To avoid 'missing days' in your reports, the profile can be configured to access multiple days. Therefore, if for some reason the FTP client is unsuccessful today in accessing yesterday's log file, tomorrow it can attempt again to access the log file it missed in addition to the current log file.

Date macros can be used in the log file path within the profile configuration. For example, your log file name for today's log file is ex20020615.exe (year 02, month=Feb., and day=15). The following string can be used to retrieve log files for multiple days.

ftp://www.domain.com/logs/ex%date-1%%yyyy%%mm%%dd%.log | ftp://www.domain.com/logs/ex%date-2%%yyyy%%mm%%dd%.log | ftp://www.domain.com/logs/ex%date-3%%yyyy%%mm%%dd%.log

With this type of configuration, each time the analysis begins, three days of log files are accessed. So, if for some reason the FTP client is unsuccessful today in accessing the log files, most likely they will be accessed the following day.

Notes:

To review further information about date macros that can be used in Firewall Suite, please review the following knowledge base article.

Q10272: How do I configure date macros?

This article was previously published as:
NETIQKB4680

Last Modified 5/2/2007.
https://support.trustwave.com/kb/KnowledgebaseArticle10478.aspx