topic Converting PIX/ASA logs into CSV in Network Security

Converting PIX/ASA logs into CSV

edoig.admin — Mon, 11 Mar 2019 19:23:49 GMT

I work as a network forensics analyst for a gov't agency. We are getting large amounts of PIX and ASA logs being pushed to our Syslog server. I'm trying to create a script to parse/convert the standard PIX/ASA logs into CSV files in order to assist with integration to other products. Has anyone had success with this, or have a perl / shell script(awk grep, etc) written for this task? I would like to capture as much data as possible.

Re: Converting PIX/ASA logs into CSV

Kureli Sankar — Fri, 17 Dec 2010 12:58:06 GMT

What syslog server are you using? The free kiwi syslog has an option to spin a new file based on the time or day to a text file automatically which can be archived later. Seems like kiwi can export in .csv format. http://www.kiwisyslog.com/help/syslogwebaccess/index.html?export_to_csv.htm

-KS

Re: Converting PIX/ASA logs into CSV

edoig.admin — Fri, 17 Dec 2010 13:00:09 GMT

just a linux server, no special software, linux server with specific cron jobs to pull the data, so ideally i'll be adding a cron job to convert logs into csv.

Re: Converting PIX/ASA logs into CSV

edoig.admin — Mon, 20 Dec 2010 15:24:31 GMT

anyone else have any suggestions?

Re: Converting PIX/ASA logs into CSV

samarjit.das — Sun, 22 Apr 2012 10:08:24 GMT

Can you please send me the shell script by which I am export the CIsco ASA log into CSV format. I have similar log with same message type,

6|Apr 19 2012|09:59:24|106100|172.10.140.184|49731|172.20.72.73|23|access-list REGION_in permitted tcp REGION/172.30.140.184(49731) -> INSIDE/172.20.72.73(23) hit-cnt 1 first hit [0x3d0b619a, 0x0]

Converting PIX/ASA logs into CSV

mvsheik123 — Sun, 22 Apr 2012 21:32:16 GMT

Hello,

You can also have a SQL db pull the data from syslog server and export as CSV.

hth