Exporting Log Messages from the Audit Logger

With this procedure, TLC queries the Audit Logger File StoreConsists of a series of compressed flat files containing the log messages collected by the Manager from Log Sources, and an index of terms contained in the log messages. for log messages that satisfy specified criteria, and exports the results to a zip file.

To export log messages from the Audit Logger to a zip file:

1.

In the side bar, select Events >Audit LoggerThe TLC Console1. Tripwire Log Center Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire Log Center GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component in which you can work with the log messages collected by TLC..

2.

In the Audit Logger, select the Query tab.

3.

From the Output drop-down, select File.

TLC adds a Password field to the Query Criteria tab.

4.

(Optional) To password protect the file, enter a Password.

5.

Enter your other criteria for the query (see Table 79).

6.

Click Start.

TLC opens the Save Audit Logger Data window.

7.

Select the directory in which to save the file and click Save.