Not able move logs from reporter post-upgrade due to file permissions

book

Article ID: 205599

calendar_today

Updated On:

Products

Reporter-VA

Issue/Introduction

Environment :  

-- "Web Security Service(WSS)" logs downloaded from cloud will be placed local folder on report. Eg folder name - WSSCloudLogs 
-- After log is processed to database, WSS logs will be moved to different local folder Eg folder name  - WSSCloudLogDone

After upgrade reporter VA from 10.3.2.4 to 10.5.2.2" the moved logs have 440 permission and cannot be transferred out from "WSSCloudLogDone" folder using FTP client.

In older version of Reporter those files have 660 permission and had no such transfer issue.

Cause

Reporter engineering bug ID is RPT-831 is filled for fixing the permissions and it would be taken up in the next development life-cycle for reporter.

Environment

Release : 10.5.2.2

Component : WSS logs downloaded to reporter

Resolution

WORKAROUND:

We can setup different server to pull the WSS log using WSS SYNC API. Below document explain how-to.

https://knowledge.broadcom.com/external/article/171280/siem-integration-with-web-security-servi.html
https://portal.threatpulse.com/docs/sol/PDFBriefs/PDF_SyncAPI.pdf
 
-- Next setup a FTP server in the same server to serve the downloaded WSS log and reporter can pull them as normal FTP client. 


-- You can control permissions on that FTP server.