This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

EMail-Alarm/Notification when Accessing a Specific Domain/URL?

Dear Folks

Long story short: I want to be informed via email every time a specific website is being accessed by a user, means when this domain is logged in the web filter log.

Is that possible? How?

Thank you very much!
Uwe

This thread was automatically locked due to age.

0 Scott_Klassen over 8 years ago

This isn't possible on the UTM itself. What you would need to do is to transfer the logs to a syslog server that supports scripted notifications, then you would be able to do so from there. You could also transfer the web filtering log via FTP or SMB, then write a script or program to parse through the raw log to look for the URL and email you when found.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 UweT over 8 years ago in reply to Scott_Klassen

Thank you, Scott!

I thought about that as a reasonable option. Guess it's the only one to forward the log to an external syslog server and post-process it.

Can one automatically forward the entire daily web filter log to a server or does that auto-option only work "per log entry"?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

Not sure what you mean.
Syslog (Logging & Reporting > Log Settings > Remote Syslog Server) kind of acts like tail and new entries will be forwarded as they are created.
Log Archiving will send the log from the previous day, all at once.

Syslog would be the way to go if you want "live" notification of domain X access.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel