000024808 - How to obtain raw data from enVision

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000024808
Applies ToRSA enVision
lsdata
syslog data
IssueHow to obtain raw data from enVision
ResolutionHow to pull events from enVision into a text format
Open a command prompt on the enVision server (Dsrv, if LogSmart), and navigate to the %_ENVISION%\bin directory.
Run the following:
lsdata -events syslog -devices 1.1.1.1 -time 20061201 2006120102 > f:\data.txt
where 1.1.1.1 is either the device IP address or the device type you want
and where 20061201 is the start time, and 2006120102 is December 1st, 2006 at 2AM.
Legacy Article IDa36718

Attachments

    Outcomes