Exporting Data

The Novell IP Gateway audit log is stored in a Btrieve* file on the Novell BorderManager 3.7 server and is maintained by CSAUDIT.NLM. The audit log cannot be edited or manipulated from the server; however, the data can be exported for analysis. The format of the exported data is compatible with popular trend analysis software packages, such as WebTrends*.

There are two ways to export the Novell IP Gateway audit log information from NetWare Administrator:

If you use the second method, you can combine the audit log files from other Novell BorderManager 3.7 services with the Novell IP Gateway audit log file into a single ASCII file.


Exporting Data from the IP Gateway Users Statistics Window

To export records from the IP Gateway Users Statistics window, complete the following steps:

  1. In NetWare Administrator, click the Server object representing the Novell BorderManager 3.7 server.

  2. Select Novell BorderManager 3.7 from the Tools menu.

  3. Click IP Gateway > select View Audit Log from the Object menu.

  4. If the records you want to export do not appear, click Display Records, enter the dates for the records you want to display > click OK.

  5. In the IP Gateway Users Statistics window, click Export Data and enter the path and filename or click Browse to select a destination for the export file.

  6. Select one of the following sort formats under Information Output Selection > click OK:

    • Time entry (connection by connection)---(Default selection) Sorts records from earliest entry time to latest entry time.
    • Access by users---Sorts records in alphabetic order based on the user's eDirectory username.
    • Access by hosts---Sorts records in ascending order (for IP addresses) or alphabetic order (for DNS hostnames).

  7. (Conditional) If the export filename already exists under the directory path selected, you are prompted to replace the file. Click Yes to overwrite the file or No to specify the destination as described in Step 5.

The record fields are written to disk with a tab as the delimiter. Each record ends with a carriage return and line feed. The exported data has the following format:


Exporting Data Using the BorderManager Pull-Down Menu

Use the Export Logs selection from the Novell BorderManager 3.7 pull-down menu to export the Novell IP Gateway audit log. This procedure extracts the same data from the Btrieve database, but offers additional export options that cannot be activated from the IP Gateway Users Statistics window.

To export the Novell IP Gateway audit log using the Export Logs menu selection:

  1. In NetWare Administrator, click the Server object representing the Novell BorderManager 3.7 server.

  2. Select Novell BorderManager 3.7 from the Tools menu.

  3. From the Novell BorderManager 3.7 menu, select Export Logs.

  4. Click Set Range > enter the date range.

    This is the range of dates comparable to the dates used to display records in the IP Gateway Users Statistics window. The default range is the current server date.

  5. Click Browse to select the drive mapped to the destination for the export file.

    This is the path and filename for the export file. The default destination is A:\YYYYMMDD.LOG, where YYYY is the current year, MM is the current month, and DD is the current day. If you change the filename from the default format, the filename will not reflect the current server date. For example, if you change the filename format to MMDDYYYY.LOG, the next time you try to export logs on another day, the log filename will not have incremented to the current date.

  6. (Optional) If the default filename is unacceptable, enter a new filename in the File field.

  7. (Optional) If you want to combine the Novell IP Gateway audit log with audit logs from other Novell BorderManager 3.7 services, check the Combine Log Files check box.

    This feature allows log files from different Novell BorderManager 3.7 services to be combined into a single output file. When log files are combined, they are appended to one file, service by service.

  8. Under Log Selection, check the IPX gateway check box.

    NOTE:  Checking the box for IPX gateway exports the entire audit log file for the Novell IP Gateway, not just the records for the IPX/IP gateway service.

  9. (Optional) If you checked Combine Log Files in Step 7, under Log Selection, check all other Novell BorderManager 3.7 audit log files to be combined with the Novell IP Gateway audit log file.

  10. Click OK.

The audit log is exported to an ASCII file. The record fields are written with a tab as the delimiter. Each record ends with a carriage return and line feed. The exported data has the following fields:

If the Combine Log Files feature is not selected and you select one or more services under the Log Selection field, a separate export file is created for each service under a subdirectory of the export destination path.

The export subdirectories used are shown in the following table.

Log Type Export Subdirectory

HTTP Proxy

HTTP

FTP Proxy

FTP

NNTP Proxy

NNTP

Mail Proxy

SMTP

RealAudio* and Real Time Streaming Protocol (RTSP) Proxies

RAUDIO

DNS Proxy

DNS

Generic Proxy

GENERIC

SOCKS Client

SOCKS

IPX Gateway
(Novell IP Gateway)

IPXGW

VPN

VPN

ACL
(access control)

ACL

For example, if you specified an export destination of VOL1:LOGS\19981019.LOG, did not select the Combine Log Files feature, and checked the boxes for HTTP proxy, FTP proxy, and IPX gateway, the following logs would result:



  Previous Page: Viewing Host Statistics  Next Page: Checking the Information Log