1) Copy attached files to your archiver using winscp for ex.
2) Cd to the directory where the files exist
3) chmod +x saget.py
4) If you want to see all the options of the script please run the below:

./saget.py -help

5) To extract logs Run the below:

./saget.py -L -t x.x.x.x -p 50108 -u admin -s "2015-Dec-01 12:00:00" -e "2015-Dec-20 12:00:00" -o rawlogs.log -q "did exists"

6) you will be prompted to enter a password, enter the password

7) All logs are written to the same directory rawlogs.log file.

 

• NwConsole then press enter
• login localhost:50008 admin
• Type in the password.
• you should be successfully connected in that step

3) After -s "put here the start date of your needed logs"
4) After -e "put here the end date of your needed logs"
5) After -q " put here the query you want to run"

Some examples of your queries:

-q "device.class='firewall'"
-q "did  exists"
-q "ip.address='x.x.x.x'"