Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I'm using QRadar as a SIEM solution. I want to integrate TMG logs so that I can obtain/search GET requests with specific extensions (e.g., .jpg, .html, .php).

I know in Apache you can get this through web access logs.

share|improve this question

1 Answer 1

The following might help with parsing your Apache access log for GET requests: Analyzing Apache Log Files

I haven't used TMG, but have done this with awk. See section 1 in the link above for the Apache combined log format, and sections 2 and 3 for parsing examples which you might adapt.

You can also parse Apache logs with cross-platform scripting languages, like Perl: ApacheLog::Parser

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.