Juniper VPN Collector and WebTrends Enhanced Logfile Format (WELF)

Products

• Security Information Manager

Issue/Introduction

Events are not parsed correctly, primarily noticed in the Username field.

 

Cause

The Syslog format of WELF is not supported by our Juniper VPN Collector

Resolution

Per the Juniper VPN Collector PDF, you must use the Standard Syslog format option.

The reason we do not support WELF is because this format never gained broad acceptance as an industry standard and has a number of limitations.

It is likely that WELF will be replaced by the Common Event Expression (CEE) standard that is currently in work and supported by the United States Federal Government.