WSM User Guide - WatchGuard Technologies

Using LogViewerConsolidating log filesYou can put together two or more log files into one file. You can then use this file in Historical Reports,LogViewer, or some other tool to examine log data for an extended time interval. To merge more thanone log file into one file:• The log files must be from the same Firebox• The log messages in the files must be in date and time order• The log files must be have been created with the same appliance software. You cannot merge alog file created with WFS appliance software with a log file created with Fireware® appliancesoftware, even if they are from the same Firebox.Right-click the Log Server icon on your Windows toolbar and select Merge Log Files. Or, from the LogServer Status/Configuration interface:1 Click File > Merge log files.The Merge Logfiles dialog box appears.2 Click Browse to find the files to put together.3 Click Merge.The log files are put together and saved to a new file in the specified directory.Updating .wgl log files to .xml formatWhen you migrate from an earlier version of WatchGuard System Manager to WSM 8.3 you can convertlog files from .wgl to .xml format. This is also helpful if you manage a mixed network with different versionsof WSM. After converting, you can use your WSM 8.3 LogViewer or report tools on log files createdwith WatchGuard Management System 7.3 or earlier.To help you understand the new log structure, or to integrate .xml-format logs into a third-party application,see the following Advanced FAQ. It gives an XML schema and Document Type Definition (DTD)for the new WatchGuard log file:https://www.watchguard.com/support/AdvancedFaqs/wsm8_xmlschema.aspWhen you convert a log file from .wgl to .xml:• The XML file is usually smaller than the .wgl file.• If you open the new XML file in an XML editor, you can see some duplicate entries. This is afunction of the way Historical Reports made reports in WSM 7.3 and earlier. It does not causeproblems in LogViewer or in Historical Reports for WSM 8.3.User Guide 95