Log Reader

In the readcsvlog function and all its variants, the row results are returned by concatenating each field with the variable private static final String SEPARATOR, whose value is a comma. When concatenating values that contain a comma, there is no way to parse the results. If it is not possible to return the rows as an array of strings (with each field as an element), could an extension be made to allow passing the output separator value?

Anyone run into this error? I'm simply passing in pagingInfo to the recordTypeSource function through use of the a!query() function.

Expression evaluation error at function 'systemlogsrecordtypesource' [line 7]: The passed parameter(s) are of the wrong type. Received the type com.appiancorp.common.xml.JaxbConversionException: JAXB failure trying to convert typed value TypedValue[it=1474,v={TypedValue[it=1478,v=<null>],TypedValue[it=1154,v=<null>],{1,101,<null>}}] to java class com.appiancorp.common.query.Query.

Code Snippet:

systemlogsrecordtypesource(
a!query(pagingInfo: a!pagingInfo(startIndex: 1, batchSize: 101)
)
)

Hi, teams,

I am trying to get a day's worth of rdbms-audit logs.
However, I have tried the following expression, but could not get the logs that have been evacuated.
Any help would be appreciated. Thanks in advance.

Log format: rdbms-audit.log.yyyy-mm-dd.*

readlogpaging( 
 logPath: "audit\rdbms\rdbms-audit.log." & tostring(year(today())) & "-" & substitute(    padleft(tostring(month(today())), 2),    " ",    "0"  ) & "-" & substitute(    padleft(tostring(day(today())), 2) & "." & tostring(pv!LogCounter),    " ",    "0"  ),
 startIndex: 1, 
 batchSize: - 1
).rows

We have an older version of this plugin and I see that another parameter has been added to the latest version of the plugin to address this issue. I'll give that a try.

We are trying to consume the rdbms-audit logs. We are using the function taillogpaging(). If you pass a timestampStop to this function, it does not return any data. The timestamp format in the rdbms-audit log is yyyymmdd hh:mm:ss. 

We also use the taillogpaging() while consuming the tomcat-access logs and that log has a timestamp format of yyyy-mm-dd hh:mm:ss. This seems to work. 

Any suggestions?

Hi Team,

I am trying to get sites usage data from logs by using readcsvlog function but just getting headers and null for rows. Total count is coming as -1. Tried using readcsvlogpaging and readcsvlogpagingwithheaders functions too but that also didn't seem to work. 

Not sure if there is anything to do with size of file as that log file is more than 6 mb. I am able to get data for other log files. Currently working on 24.2 version.

PFA code snippet and output.

Any help would be appreciated. Thanks in advance.

Regards,

Trunal Jain

Hi Team,

Would it be possible to get last logged in (3 months ago ) user details by using this plugin?

Thanks,

Sai.

Hi 

I've been using the Plug In function without issue - I find you have to specify all input values on the function. even if they are null. Some functions within the plug in seem to expect all inputs named even if they are null. There may also be some error output listed in STDOUT that can help determine what the issue is. 

I've been using the readcsvlogpaging function without issue - if you try setting the other inputs to {} or NULL that may work. 

fn!readcsvlogpaging(
csvPath: "login-audit.csv",
startIndex: ri!pagingInfo.startIndex,
batchSize: ri!pagingInfo.batchSize,
filterColumName: "Timestamp",
filterOperator: "startsWith",
filterValue: local!convertedToday,
timestampColumnName: "Timestamp",
timestampStart: now() - intervalds(0,ri!pastMinutes,0),
timestampEnd: now()

),

In my use case I'm only looking for Todays log in records and within a specified time frame - hence the use of timestamp filtering. 

Hope this helps. 

Hi Gus Lines  , I tried that as well but no response yet.

thanks

• The 2.1.3 version allows specifying the date format when tailing a log using taillog and taillogpaging