Exporting CSPM Event Viewer Database

[rsmith]

Is there a way to export the database logs from the CSPM event viewer database events...or do I need to go directly to the database itself? My ISP is investigating some activity and would rather see the logs in another format.

[bducharm]

There is a executable file that will convert the CSPM database to ASCII, comma-delimited logs. Use the cvtNrlog executable to do this.

[rsmith]

Thanks for the info!

[rsmith]

Sorry to be a pain...I looked at the switches for the cvtNrlog but I didn't see an option for dumping the logs to a particular file...does the cvtNrlog create a file that it dumps the logs to?

[marcabal]

I haven't used it in awhile, but if I remember correctly it will send the alarms to Standard Out.

So you should be able to redirect the output of the command to a file.

Example: cvtnrlog > logfile