Jason Yu
asked on
how to extract lines with specific key word from a 30 G firewall log file.
I got a ftp drop error frequently on my gentran edi server. the error is as below:
Sent: Sunday, March 09, 2014 6:08 PM
To: EDI Group
Subject: Error in BaseEDI_Get_SCNCentre PID=4976630
System of Origin: IBM Sterling B2B Integrator 5.2 .
An ERROR has occurred in process BaseEDI_Get_SCNCentre.
Process ID: 4976630
Error Description: FTPGetError_Get
.
The errored file has been written to /u1/gis5.2/install/_BaseED I/inboundE rrors with filename 4976630.FTPGetError_Get.20 1403091805 89_089.txt .
.
More details can be found in the GIS process Monitor.
My EDI coworker doubts if the firewall blocked the ftp traffic from time to time. My firewall is an old Cisco PIX 507 firewall with PIX Version 7.2(4). I am using Cisco ASDM 5.2 for PIX to check the firewall status. I saved the firewall log file to a linux box.
When I was checking the log file, it has a size of 30 G per day, I would like to know if there is a way I can customize the log file so that I capture only the records relates to that server?
Also, if I want to process that big log file, what linux command can I use to extract the lines with specific word.
thank you.
firewall-log-file-analysis.png
Sent: Sunday, March 09, 2014 6:08 PM
To: EDI Group
Subject: Error in BaseEDI_Get_SCNCentre PID=4976630
System of Origin: IBM Sterling B2B Integrator 5.2 .
An ERROR has occurred in process BaseEDI_Get_SCNCentre.
Process ID: 4976630
Error Description: FTPGetError_Get
.
The errored file has been written to /u1/gis5.2/install/_BaseED
.
More details can be found in the GIS process Monitor.
My EDI coworker doubts if the firewall blocked the ftp traffic from time to time. My firewall is an old Cisco PIX 507 firewall with PIX Version 7.2(4). I am using Cisco ASDM 5.2 for PIX to check the firewall status. I saved the firewall log file to a linux box.
When I was checking the log file, it has a size of 30 G per day, I would like to know if there is a way I can customize the log file so that I capture only the records relates to that server?
Also, if I want to process that big log file, what linux command can I use to extract the lines with specific word.
thank you.
firewall-log-file-analysis.png
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.