I'm using QRadar as a SIEM solution. I want to integrate TMG logs so that I can obtain/search GET requests with specific extensions (e.g.,
I know in Apache you can get this through web access logs.
The following might help with parsing your Apache access log for GET requests: Analyzing Apache Log Files
I haven't used TMG, but have done this with
You can also parse Apache logs with cross-platform scripting languages, like Perl: ApacheLog::Parser