ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Logs are encrypted on Qradar server
Article ID: 169012
Updated On:
Products
Advanced Secure Gateway Software - ASG
SG-300
SG-S500
SG-S400
Secure Web Gateway Virtual Appliance
SG-S200
ProxySG Software - SGOS
SWG VA-100
Issue/Introduction
Unable to view custom access log on QRadar due to encrypted or zip log by default.
Cause
The ProxySG initially compresses the log file into a gzip.
Resolution
In Management console > Configuration > Access Logging > Logs > Upload Client; save log file as "text file" under Transmission Parameters.
Feedback
Yes
No
Powered by
