Exporting Results (CSV, CEF, PDF)

CSV, CEF, and PDF files can be created by workflow processes. This function exports all such files that are on the Guardium system.

CEF/CSV files that are created by workflow processes can also be written to syslog. When that happens, those files are not available to be exported by the means described here. Those files should be accessed from syslog by other means.

To export CSV, CEF, and PDF files:

  1. Open the Results Export (files) by clicking Manage > Data Management > Results Export (Files).
  2. Choose an option from the Protocols radio buttons: SCP, FTP, Amazon S3, or Softlayer.
  3. For Host, enter the IP address or DNS host name of the host to receive the files.
  4. For Directory, identify the directory in which the data is to be stored. How you specify this directory depends on the protocol you selected.
    • For FTP: Specify the directory relative to the FTP account home directory.
    • For SCP: Specify the directory as an absolute path.
  5. Change the Port that can be used to send files over SCP and FTP. The default port for SSH, FTP, and SFTP is 22. The default port for FTP is 21.
  6. For Username and Password, enter the credentials for the user logging in to the host machine. This user must have write/execute permissions for the directory that is specified in the Directory field.
  7. Use the Scheduling section to define a schedule for running this operation on a regular basis.
  8. Click Save to save the configuration. The system attempts to verify the configuration by sending a test data file to that location. If the operation fails, it displays an error message.
  9. Click Run Once Now to run the operation once.
  10. To verify that files have been exported, check the Aggregation/Archive Log. There should be a Send activity for each CSV or CEF file exported.

To define a default separator, open the Global Profile by clicking Setup > Tools and Views > Global Profile.

To enter a label to be included in all file names, go to Tools > Audit Process Builder.
Note:

The Syslog maximum message size is 4000. CSV results are truncated if they exceed this limit.

Set the encoding to UTF-8 no matter what application is used to read .CSV files. Excel defaults to a different character set and can corrupt the .CSV files. Also, when using Excel, import the .CSV file and select UTF-8 encoding instead of just opening the file and having Excel launch based on file association.