Difference between revisions of "project - log settings identify"
(→scratch) |
(→scratch) |
||
| Line 15: | Line 15: | ||
| − | cpmiquerybin object "" network_objects "name=' | + | cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep self_log_server | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$ |
| − | cpmiquerybin object "" network_objects "name=' | + | cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep forward_logs | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$ |
| − | cpmiquerybin object "" network_objects "name=' | + | cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep log_switch_before_forwarding | sed -n 's/.*(\([^ ]*\))/\1/p' |
| − | cpmiquerybin object "" network_objects "name=' | + | cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep -A 1 log_forward_target | grep ":Name" | sed -n 's/.*(\([^ ]*\))/\1/p' |
'''multiple results possible''' | '''multiple results possible''' | ||
| − | cpmiquerybin object "" network_objects "name=' | + | cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | sed -n -e '/:send_logs_to/,/:self_log_server/ p' | grep -E ":Name |self_log_server (true)" |
backup_log_servers | backup_log_servers | ||
Revision as of 17:13, 31 October 2013
Problem:
indentify firewalls configured to log to CMA, or locally... anything except for CLM only.
script name:
???
scratch
mdsenv <ip>
cpmiquerybin attr "" network_objects "firewall='installed'" -a __name__ ###indentify all firewalls
cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep self_log_server | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$
cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep forward_logs | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$
cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep log_switch_before_forwarding | sed -n 's/.*(\([^ ]*\))/\1/p'
cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | grep -A 1 log_forward_target | grep ":Name" | sed -n 's/.*(\([^ ]*\))/\1/p'
multiple results possible
cpmiquerybin object "" network_objects "name='$FIREWALL_NAME'" | sed -n -e '/:send_logs_to/,/:self_log_server/ p' | grep -E ":Name |self_log_server (true)"
backup_log_servers
