Download as pdf or txt
Download as pdf or txt
You are on page 1of 27

NG|Import Guide

Version 1.7.0

All material in these pages, including text, layout, presentation, logos, icons, photos, and all other artwork is the Intellectual
Property of NetGuardians SA, unless otherwise stated, and subject to NetGuardians SA copyright. No commercial use of any
material is authorised without the express permission of NetGuardians SA. Information contained in, or derived from these
pages must not be used for development, production, marketing or any other act, which infringes copyright. This document is
for informational purposes only. NetGuardians SA makes no warranties, expressed or implied, in this document.
TABLE OF CONTENTS

1 Import audit trail files with NG|Import 4


1.1 On NG|Screener Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.2 On Remote Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.3 Supported sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

2 Global Options 6

3 beeware command 8
3.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

4 t24Protocol command 10
4.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

5 t24Journal command 12
5.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5.2 Command Example for T24 Transaction Journal . . . . . . . . . . . . . . . . . . . . . . 13
5.3 Command Example for T24 Transaction Override Journal . . . . . . . . . . . . . . . . . 14

6 logr001 command 16
6.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
6.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

7 olympic-fdbmvt command 18
7.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
7.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

8 ibmSls command 19
8.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
8.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

2
9 CSVFile command 20
9.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
9.2 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
9.3 Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
9.4 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

10 SecurTrack command 23
10.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
10.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

11 Syslog command 25
11.1 Command definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
11.2 Command Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

3
CHAPTER

1
IMPORT AUDIT TRAIL FILES WITH
NG|IMPORT

NG|Import is a command tool to read and import audit trails files in NG|Screener. NG|Import will read
an input text file (or one audit trail line), parse & transform it in an NG compatible format and send it to
NG|Screener by syslog (TCP 514) is used to read a custom text file then send event by syslog
protocol.
NG|Import may be used:
• On the NG|Screener server itself.
• On any server with Java.
Note: This chapter is based on NG|Import version 1.3.2

1.1 On NG|Screener Server


NG|Import needs to be installed on NG|Screener server. To install it, upload the ngImport.rpm file
NG|Screener and install it with rpm -ivh (example: rpm -ivh ngImport-1.3.2-1.noarch.rpm)
Once installed it may be used by calling the ngimport command. The files to import should have been
previously uploaded to NG|Screener server as illustrated below.

4
NG|Import Guide 1.2. ON REMOTE SERVER

Figure 1.1: NG|Import on local server

1.2 On Remote Server


To use NG|Import on a remote server, the NG|Import jar file is needed on the server. Java virtual
machine (min version 1.6_21) is a prerequisite. Running NG|Import (example: java -jar
NgImport-1.3.2-jar-with-dependencies.jar) will read the input file (or audit trail line) and sent it
by syslog to NG|Screener server as illustrated below.

Figure 1.2: NG|Import on remote server

1.3 Supported sources


NG|Import supports the following source formats (command options):
• beeware: ISuite audit trails from Beeware
• t24Protocol: Temenos T24 protocol file

• t24Journal: Temenos T24 journal (example: TXN.JOURNAL)


• logr001: Logr-001 report from Sungard Apsys
• olympic-fdbmvt: FDBMVT events from ERI Olympic

• ibmSls : Secure Login Service (IBM) sessions records


• CSVFile: Any CSV file

5
CHAPTER

2
GLOBAL OPTIONS

Global options for NG|Import are as follows:

[ root@NG - SCREENER ~]# ngimport


The following options are required : -c , -- content
Usage : NgImport [ options ] [ command ] [ command options ]
Options :
-a , -- address Specify the appliance address ( null = Stdout
and Local Output )
* -c , -- content Specify file path ( with ’ file : ’ before path )
or content to parse
-E , -- disable - newline Disable interpretation of ’\n ’ provided in -
c option ( default : false )
-e , -- encoding Specify the encoding source file ( default :
UTF -8)
-h , -- help Show help ( default : false )
-nx , -- noexit Disable the exit code ( default : false )
-p , -- port Specify the appliance syslog port ( default :
514)
-s , -- skip Skip N lines ( only supported for some
formats ) ( default : 0)
-sc , -- separator - char Character separator between two keys / values
(\ t = tab and \ s = space )
-v , -- verbose Give some informations about error ( default :
false )

Argument Description Example


-a, –address IP or Hostname of NG|Screener appli- -a 10.10.10.10
ance
-c, –content Path of the file that you want parse -c file:/home/myUser/myEventFile.txt
(with ’file:’ before path)

6
NG|Import Guide

-E, –disable-newline Disable interpretation of new line char- -E


acter provided in -c option
-e, –encoding Source file encoding. Use to send -e “ISO-8859-1”
event with all special character (exam-
ple: e for latin-1 source file send with
UTF-8 format )
-h, –help Show help -h
-nx, –noexit Disable exit code. Error code: 0 = OK, -nx
1 = OK
-p, –port Specify syslog port for NG|Screener -p 514
server
-s, –skip Skip N first lines -s 1
-sc, –separator-char Character to separate two key/value el- -sc ’|’
ement
-v, –verbose Activate debug mode -v

7
CHAPTER

3
BEEWARE COMMAND

This command give possibility to send ISuite events provided by Beeware.

3.1 Command definition


This command have many specific options describe in the following table.

-dfa , -- dateFormatAccess Beeware date format for Access messages (


default : dd / MMM / yyyy : hh : mm : ss Z )
-dfe , -- dateFormatError Beeware date format for Error messages (
default : EEE MMM dd hh : mm : ss yyyy )
-h , -- help Show this help again ( default : false )
-s , -- source Beeware source server name ( default :
localhost )

Argument Description Example


-dfa, –dateFormatAccess Date format in the source file for bee- -df “dd/MMM/yyyy:hh:mm:ss Z” =
ware ISuite Access report. The date 22/Dec/2013:10:54:52 +0100
format value expected by NG|Import is
based on java SimpleDateFormat.
-dfe, –dateFormatError Date format in the source file for bee- -df “EEE MMM dd hh:mm:ss yyyy” =
ware ISuite Error report. The date for- Mon Nov 04 10:54:52 2013
mat value expected by NG|Import is
based on java SimpleDateFormat.
-h, –help Show help -h
-s, –source Source server name -s myBeewareServer

3.2 Command Example


Input File

8
NG|Import Guide 3.2. COMMAND EXAMPLE

The input file it a Beeware Isuite Access example.

File Example:

Figure 3.1: Beeware File Example

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / beewareAccess . txt -a localhost beeware -s


myBewareHostname

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myBeewareHostname/beewareIsuiteAccess/23-11-2013.log

Figure 3.2: Beeware Output Example

9
CHAPTER

4
T24PROTOCOL COMMAND

This command give possibility to send Protocol file provided by Temenos T24.

4.1 Command definition

-daf , -- dateActionField T24 Action date field


-df , -- dateFormat T24 Protocol date format ( default : yyyyMMdd HH
: mm : ss )
-h , -- help Show this help again ( default : false )
-he , -- header T24 Protocol header format ( default : KEY , DATE ,
TIME , TERMINAL , COMPANY , USER , APPLICATION , LEVEL , APP , REMARK , METHOD )
-s , -- source T24 source server name ( default : localhost )
-v , -- csv T24 csv output format ( default : false )

Argument Description Example


-daf, –dateActionField T24 header field that contains action -dfa KEY
date.
-df, –dateFormat Date format in the source file. The date -df “yyyyMMdd HH:mm:ss” =
format value expected by NG|Import is 20131222 10:54:52
based on java SimpleDateFormat.
-h, –help Show help -h
-he, –header T24 Protocol header format. This for- -he “Column1,Column2”
mat inform about how many colums
has the file and about their name
-s, –source Source server name -s myT24Server
-v, –csv Send event with csv format and not –csv
with key value format

10
NG|Import Guide 4.2. COMMAND EXAMPLE

4.2 Command Example


Input File

This command give possibility to send Protocol file from Temenos T24.

File Example:

Figure 4.1: T24 Protocol File Example

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / PROTOCOL . txt -a localhost t24Protocol -s


myProtocolServer

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myProtocolServer/temenosT24Protocol/23-11-2013.log

Figure 4.2: T24 Protocol Output Example

11
CHAPTER

5
T24JOURNAL COMMAND

This command give possibility to send T24 Journal (TXN.JOURNAL) from Temenos T24.

5.1 Command definition


This command have many specific options described in the following table.

-- c om pan yN am ePa tt er n T24 transaction override journal


pattern enabling to locate company name ( default : COMPANY NAME :)
-ap , -- ap pl ic at ion Pa tt ern T24 transaction journal pattern
enabling to locate application name ( default : APPLICATION :)
-ch , -- column - header Comma separeted column header names (
default : TRANS . REFERENCE , ACCT / CATEG / CRF , LCY AMOUNT , EXCH . RATE , CCY
, FCY AMOUNT , VAL . DATE , T /C , DEPT , A / O . , PRODUCT , CUSTOMER )
-cw , -- column - width Comma separated values of column
positions
-df , -- dateFormat T24 transaction journal date format (
default : dd MMM yyyy )
-dp , -- datePattern T24 transaction journal pattern
enabling to locate date line ( default : Page )
-h , -- help Show this help again ( default : false )
-mls , -- multiline - separator Separator for merging multiple lines (
default : ; )
-s , -- source T24 source server name ( default :
localhost )
-sl , -- skip - line Comma separated line pattern you want
to skip ( default : *** , LOCAL CURRENCY , - - - - - - - - - -)
-sn , -- service - name Service name value ( default :
temenosT24Transaction )
-st , -- startTable T24 transaction journal pattern
enabling to locate beginning of the table ( default : =======)
-do , -- day - offset Day offset to apply on the Journal
date

12
NG|Import Guide 5.2. COMMAND EXAMPLE FOR T24 TRANSACTION JOURNAL

Argument Description Example


–companyNamePattern Pattern to locate the company name. –companyNamePattern “COMPANY
This pattern exist only in the T24 Trans- NAME”
action Override journal.
-ap, –applicationPattern Pattern to locate the application name. –ap “APPLICATION”
This pattern exist only in the T24 Trans-
action journal.
-ch, –column-header Name of each column that you want in –column-header
the event sent (separator is ’,’) “TRANS.REFERENCE,ACCT/CATEG/
CRF, LCY AMOUNT, EXCH.RATE,
CCY, FCY AMOUNT, VAL.DATE,
T/C,DEPT, A/O., PRODUCT, CUS-
TOMER"
-cw, –column-width End position value for each report col- -column-width
umn. A report begin by position 1 in a "18,32,50,63,66,86,97,101,106,111,118
text file. (separator is ’,’) ,128"
-df, –dateFormat Date format in the source file. The date -df “dd.MM.yyyy HH:mm:ss” =
format value expected by NG|Import is 22.12.2013 10:54:52
based on java SimpleDateFormat.
-h, –help Show help -h
-mls, –multiline-separator Separator for merging multiple lines -mls “;”
-s, –source Source server name -s myT24Server
-sl, –skip-line Skip line if pattern is find in the report –skip-line "firstPatern,secondPattern"
line.
-sn, –service-name Service name value of the event send –service-name
by syslog “temenosT24Transaction”
-st, –startTable Pattern to locate beginning of the table -st “==========”
-do, –day-offset number of day in the past or in the futur -do “-1”
you want modify

5.2 Command Example for T24 Transaction Journal


Input File

The input file is the TXN.JOURNAL report. Only the report format coming with T24 Model Bank is
supported. If you use a custom format, please contact NetGuardians.

File Example:
Note the end position for each column (highlighted in red) to import the file correctly (option
–column-width).

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / TRANSACTION . txt -a localhost t24Journal -


sn
" t e m e n o s T 2 4 T r a n s a c t i o n " -s m yT r an s ac t i on S er v e r -- column - width

13
NG|Import Guide 5.3. COMMAND EXAMPLE FOR T24 TRANSACTION OVERRIDE JOURNAL

Figure 5.1: Transaction File Example

"18 ,32 ,50 ,63 ,66 ,86 ,97 ,101 ,106 ,111 ,118 ,128"

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myTransactionServer/temenosT24Transaction/26-11-2013.log

Figure 5.2: Transaction Output Example

5.3 Command Example for T24 Transaction Override Journal


Input File

The input file is the T24 Transaction Override report. Only the report format coming with T24 Model
Bank is supported. If you use a custom format, please contact NetGuardians.

File Example:

Figure 5.3: Transaction Override File Example

Note the end position for each column (highlighted in red) to import the file correctly (option
–column-width).The maximal report position should be defined as the last number. Tests done by
NetGuardians shown that 246 is usually a good number for the last position. This may be adapted if
needed.

14
NG|Import Guide 5.3. COMMAND EXAMPLE FOR T24 TRANSACTION OVERRIDE JOURNAL

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / T RA N SA C T IO N Ov e rr i d e . txt -a localhost


t24Journal - sn
" t e m e n o s T 2 4 T r a n s a c t i o n O v e r r i d e " -s m y T r a n s a c t i o n O v e r r i d e S e r v e r -- column
- width
"24 ,45 ,58 ,71 ,246" -- dateFormat " dd MMM yy " -- column - header " KEY , MODULE ,
INPUTTER , AUTHORISER , OVERRIDEMSG " -- startTable " KEY AND CURR . NO "

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myTransactionOverrideServer/temenosT24TransactionOverride/24-06-2014.log

Figure 5.4: Transaction Override Output Example

15
CHAPTER

6
LOGR001 COMMAND

This command give possibility to send logR001 report file provided by Sunguard Apsys product.

6.1 Command definition


This command have many specific options describe in the following table.

-- column - date - name Name of date column


-- column - header Column header name ( default : CDAPPS , CDACTC ,
USERS , OBJS , FLAGETATI , DTSYSL , HRSYSL )
-- column - hour - name Name of hour column
-- column - width Value of the end column position
-- prefix Column prefix ( default : !)
-- service - name Service name value ( default : apsysLogR )
-df , -- dateFormat Logr001 date format ( default : dd . MM . yyyy HH : mm :
ss )
-h , -- help Show this help again ( default : false )
-s , -- source Logr001 source server name ( default : localhost )

Argument Description Example


–column-date-name Name of the column that contain date –column-date-name “Date”
value
–column-header Name of each column that you want in –column-header “CDAPPS, CDACTC,
the event sent (separator is ’,’) USERS, OBJS, FLAGETATI, DTSYSL,
HRSYSL"
–column-hour-name Name of the column that contain hour –column-hour-name “Hour”
value
–column-width End position value for each report col- -column-width
umn. A report begin by position 1 in a "33,49,58,94,105,116,126"
text file. (separator is ’,’)

16
NG|Import Guide 6.2. COMMAND EXAMPLE

–prefix Column separator/prefix character. –prefix "!"


–service-name Service name value of the event send –service-name “apsys”
by syslog
-df, –dateFormat Date format in the source file. The date -df “dd.MM.yyyy HH:mm:ss” =
format value expected by NG|Import is 22.12.2013 10:54:52
based on java SimpleDateFormat.
-h, –help Show help -h
-s, –source Source server name -s myLogr001Server

6.2 Command Example


Input File

This command give possibility to send LogR001 file from Apsys.

File Example:

Figure 6.1: Apsys Logr001 File Example

Note the end position for each column (refer to 5.1) to import the file correctly (option –column-width).

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / LogR001 . txt -a localhost logr001 -s


myLogr001Server - df " dd . MM . yyyy HH : mm : ss " -- column - width
"33 ,49 ,58 ,94 ,105 ,116 ,126" -- column - date - name " Date " -- column - hour -
name " Hour "

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myLogr001Server/apsysLogR/26-11-2013.log

Figure 6.2: Apsys Logr001 Output Example

17
CHAPTER

7
OLYMPIC-FDBMVT COMMAND

This command give possibility to send FDBMVT report file provided by Eri Olympic product.

7.1 Command definition


This command have many specific options describe in the following table.

-df , -- dateFormat OLYMPIC date format ( MVDTSY MVTMSY record format


) ( default : yyyyMMdd HHmmss )
-h , -- help Show this help again ( default : false )
-s , -- source OLYMPIC source server name ( default : localhost )

Argument Description Example


-df, –dateFormat Date format in the source file. The date -df “yyyyMMdd HHmmss” = 20131222
format value expected by NG|Import is 105452
based on java SimpleDateFormat.
-h, –help Show help -h
-s, –source Source server name -s myOlympicServer

7.2 Command Example


Command

Load the file in NG|Screener.

ngimport -c file :/ home / admin / Olympic . txt -a localhost olympic - fdbmvt -s


myOlympicServer

18
CHAPTER

8
IBMSLS COMMAND

8.1 Command definition


This command give possibility to send Sls report file provided by IBM product. This command have
many specific options describe in the following table.

-h , -- help Show this help again ( default : false )


-s , -- source IBM SLS source server name ( default : localhost )

Argument Description Example


-h, –help Show help -h
-s, –source Source server name -s mySLSServer

8.2 Command Example


Command

Load the file in NG|Screener.

ngimport -c file :/ home / admin / SLS . txt -a localhost ibmSls -s myServer

19
CHAPTER

9
CSVFILE COMMAND

9.1 Overview

9.2 Command definition

* -cf , -- config file Configuraiton file used to define column


-df , -- dateFormat Date format of the collumn containing the date
( default : yyyyMMddhhmmss )
-h , -- help Show this help again ( default : false )
-s , -- source CSV source server name ( default : localhost )
- sepa , -- separator Separator of the CVS files ( default : ;)

Argument Description Example


-df, –dateFormat Date format in the source file. The date -df “yyyyMMddhhmmss” =
format value expected by NG|Import is 20131222105452
based on java SimpleDateFormat.
-h, –help Show help -h
-s, –source Source server name -s myOlympicServer
-sepa, –separator Separator character for CSV file (Ex- –separator “;”
ample: ’,’ or ’;’)
-cf, –config file Configuration file to define column, -cf myConfigFile
date, hour, format

9.3 Configuration File

# fichier de commentaire
COLUMN1 = column1Name
COLUMN2 = column2Name

20
NG|Import Guide 9.4. COMMAND EXAMPLE

COLUMN3 = column3Name
DATE = dateColumn
TIME = timeColumn
COLUMN4 = column4Name
COLUMN5 = column5Name
COLUMN6 = column6Name
COLUMN7 = column7Name
COLUMN8 = column8Name
COLUMN9 = column9Name
# Signifie que nous avons a remplir de 0 un nombre de characters
TDIGIT =%06 d
C O N C A T _ D A T E _A N D _ T I M E = YES
SERVICE = myServiceName

Element Description Example


COLUMN<N> Define column name for the key value Column1=myColumn1
DATE Column date ( DATE paramater must DATE=dateColumn
be put at the position of the date col-
umn in the csv file ).
TIME Column time ( TIME paramter must be TIME=timeColumn
put at the position of the time column in
the csv file ).
TDIGIT Define number of integer in date format TDIGIT=%06d
CONCAT_DATE_AND_TIME Define if the Parameter TIME and CONCAT_DATE_AND_TIME=YES
DATE must be concatened
SERVICE Service name value of the event send SERVICE=myServiceName
by syslog

9.4 Command Example


Input File

This command give possibility to send Transaction Listing file from Temenos T24.

File Example:

Figure 9.1: CSV File File Example

Config.properties Example:

# fichier de commentaire
COLUMN1 = ID
COLUMN2 = STATUS
DATE = TIMESTAMP
COLUMN3 = USER_LOGIN
COLUMN4 = COMPUTER_SESSION

21
NG|Import Guide 9.4. COMMAND EXAMPLE

COLUMN5 = MODIF ICATION_ TYPE


COLUMN6 = COMMENT
COLUMN7 = OBJ1_TYPE
COLUMN8 = OBJ1_PRM1
COLUMN9 = OBJ1_VAL1
COLUMN10 = OBJ1_PRM2
COLUMN11 = OBJ1_VAL2
COLUMN12 = OBJ2_TYPE
COLUMN13 = OBJ2_PRM1
COLUMN14 = OBJ2_VAL1
COLUMN15 = OBJ2_PRM2
COLUMN16 = OBJ2_VAL2
COLUMN17 = OBJ3_TYPE
COLUMN18 = OBJ3_PRM1
COLUMN19 = OBJ3_VAL1
COLUMN20 = OBJ3_PRM2
COLUMN21 = OBJ3_VAL2
COLUMN22 = BU_ID
# Signifie que nous avons a remplir de 0 un nombre de caracteres
C O N C A T _ D A T E _A N D _ T I M E = NO
SERVICE = orbiumSecureasy

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / ng - dev / CSVFILE . csv -a localhost CSVFile - cf /


home / ng - dev / config . properties -s myCSVServer - df ’ yyyy / MM / dd hh : mm :
ss ’ - sepa ’,’

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2013/myCSVServer/orbiumSecureasy/24-11-2013.log

Figure 9.2: CSV File Output Example

22
CHAPTER

10
SECURTRACK COMMAND

This command give possibility to send securtrack file provided by extracomm product.

10.1 Command definition


This command have many specific options describe in the following table.

-- service - name Service name value ( default : Securtrac )


-da , -- dateAttributes Date field Attributes ( default : )
-df , -- dateFormat Securtrack date format ( default : yyyyMMdd ’T ’
HHmmss )
-h , -- help Show this help again ( default : false )
-s , -- source Securtrac source server name ( default :
localhost )

Argument Description Example


–service-name Service name value of the event send –service-name “SecurTrack”
by syslog
-da, –dateAttributes Date field attributes in the xml file -da “ActionLog”
-df, –dateFormat Date format in the source file. The date -df “yyyyMMdd’T’HHmmss” =
format value expected by NG|Import is 20150512T10:54:52
based on java SimpleDateFormat.
-h, –help Show help -h
-s, –source Source server name -s mySecurtrackServer

10.2 Command Example


Command

Load the file in NG|Screener as illustrated in the below command.

23
NG|Import Guide 10.2. COMMAND EXAMPLE

ngimport -c file :/ home / admin / securtrack . dxl -a localhost Securtrac - da


" ActionDate " -s " SecurTrackHost "

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/Year/SecurTrackHost/Securtrac/dd-mm-yyyy.log

Figure 10.1: Securtrack File Output Example

24
CHAPTER

11
SYSLOG COMMAND

This command give possibility to send file with standard syslog format.

11.1 Command definition


This command have many specific options describe in the following table.

-h , -- help Show this help again ( default : false )

Argument Description Example


-h, –help Show help -h

11.2 Command Example


Input File

This command give possibility to send a file with standard syslog format entries.

File Example:

Figure 11.1: Syslog File Example

Command

Load the file in NG|Screener as illustrated in the below command.

ngimport -c file :/ home / admin / syslog . txt -a localhost syslog

25
NG|Import Guide 11.2. COMMAND EXAMPLE

Output

Check the output syntax to ensure the proper loading of the audit trails. With the command in the
above example, the audit trails would be find in
/log-collector/2010/T24-Test-Unit/temenosT24Protocol/22-02-2010.log

Figure 11.2: Syslog File Output Example

26
LIST OF FIGURES

1.1 NG|Import on local server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5


1.2 NG|Import on remote server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

3.1 Beeware File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9


3.2 Beeware Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

4.1 T24 Protocol File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11


4.2 T24 Protocol Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

5.1 Transaction File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14


5.2 Transaction Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.3 Transaction Override File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.4 Transaction Override Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

6.1 Apsys Logr001 File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17


6.2 Apsys Logr001 Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

9.1 CSV File File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21


9.2 CSV File Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

10.1 Securtrack File Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

11.1 Syslog File Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25


11.2 Syslog File Output Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

27

You might also like