Running loganalysis.py against a V3 audit log

Wessel, Keith kwessel at illinois.edu
Wed Nov 4 16:11:48 EST 2015


Hi,

As we prepare to roll out V3, I've noticed that there are some subtle differences in the audit log formats between V2 and V3. Seems, for one, that the number of fields in the audit log have changed as have the message profile names enough that loganalysis.py no longer works on V3 audit logs. I've made some modifications to loganalysis.py that I think are correct, and I may ask here to confirm. Before I do, though, has anyone already contributed a modified version of loganalysis.py for parsing IDP V3 logs?

Thanks,
Keith



More information about the users mailing list