Link to home
Start Free TrialLog in
Avatar of Jason Yu
Jason YuFlag for United States of America

asked on

how to extract lines with specific key word from a 30 G firewall log file.

I got a ftp drop error frequently on my gentran edi server. the error is as below:

Sent: Sunday, March 09, 2014 6:08 PM
To: EDI Group
Subject: Error in BaseEDI_Get_SCNCentre PID=4976630

System of Origin: IBM Sterling B2B Integrator 5.2 .
An ERROR has occurred in process BaseEDI_Get_SCNCentre.
Process ID: 4976630
Error Description: FTPGetError_Get
.
The errored file has been written to /u1/gis5.2/install/_BaseEDI/inboundErrors with filename 4976630.FTPGetError_Get.20140309180589_089.txt.
.
More details can be found in the GIS process Monitor.


My EDI coworker doubts if the firewall blocked the ftp traffic from time to time. My firewall is an old Cisco PIX 507 firewall with PIX Version 7.2(4). I am using Cisco ASDM 5.2 for PIX to check the firewall status. I saved the firewall log file to a linux box.

When I was checking the log file, it has a size of 30 G per day, I would like to know if there is a way I can customize the log file so that I capture only the records relates to that server?

Also, if I want to process that big log file, what linux command can I use to extract the lines with specific word.

thank you.
firewall-log-file-analysis.png
ASKER CERTIFIED SOLUTION
Avatar of Gerwin Jansen
Gerwin Jansen
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial