The content you are looking for has been archived. View related content below.
See the note below for an example of the entire process.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.
Below is a detailed example of the process:
RSA Security Analytics Console 10.6.6.0
Copyright 2001-2018, RSA Security Inc. All Rights Reserved.
Type "help" for a list of commands or "man" for a list of manual pages.
> login localhost:50004 admin
Password: **********
Successfully logged in as session 4436
[localhost:50004] /> cd /logs
[localhost:50004] /logs
[localhost:50004] /logs> dlogs
Usage: dlogs [<supported parameters>] [pathname=<output pathname>]
[delimiter=","] [append=<0|1>]
Retrieve logs from the logged in service. The current node must be /logs ("cd
/logs").
parameters - For supported parameters, send the following command "send
/logs help msg=download"
pathname - The optional output path where the logs will be saved,
otherwise, logs are written to the console
delimiter - The string that separates each log field, use \\t for tab,
default is a comma
append - If 1, will append to existing file, zero overwrites (default)
Aliases: downloadLogs, downloadlogs
[localhost:50004] /logs
[localhost:50004] /logs> dlogs pathname=/logs.txt time1="2013-Oct-17 00:00:00" time2="2013-Oct-19 00:00:00"
Refer to the table below for the ports associated with each service:
Service | Service Port |
Archiver | 50008 |
Workbench | 50007 |
Appliance | 50006 |
Concentrator | 50005 |
Decoder | 50004 |
Broker | 50003 |
Log Decoder | 50002 |
Log Collector | 50001 |