What log format do the SA Archive files use.

[chosroes_]

Hi All

What log format do the SA archive files use -

the 3 in use on the server are the following -

W3C Extended Log File Format

ODBC Logging

Microsoft IIS Log file format.

Does it use one of these ?

Steve

[cbarcellos_]

chosroes,

The IVE can log in WELF, WC3, and WELF 2.0. This is configured under "Use this filter" on the Archiving page.

[stine_]

And you have to set it for each log type (event, user, admin).

[zanyterp_]

You can also define your own format at System>Log/Monitoring>logFile>Filters

[IK_]

when user-access logs are archived , how does one go about  auditing the logs offline ? when i try open the logs its ASCI so presume the file is compressed or encrypted .. any ideas ? 

[nahun_]

Archived logs are compressed with gzip.

[IK_]

Thanks , i tried to open with 7zip which supports gzip and i just get a error ...... 

[nahun_]

The more information the better.

What error message?

What filename are you trying to open?

[IK_]

Filename : JuniperUserAccounts-standalone-Juniper.customer-20150302-0003 - 279mb 

i have tried 7-zip as its supports tar/gzip, etc 

when i try to open the file i get the errorr: "cant open file "file name" as archive" 

when i try to zip the file it stays the same size confirming to me that its compressed.

any ideas ? 

[nahun_]

That file is the user accounts backup file. Its not a log file, but what you can use to restore the user config.

The logs files usually start with:

JuniperAccessLog

JuniperEventsLog

JuniperAdminLog