iasalt = { # The name of the log format log.format.format_label = "IAS Alternate Log Format" log.miscellaneous.log_data_type = "generic" log.miscellaneous.log_format_type = "firewall" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[^,]+,\"IAS\",[0-9]+/[0-9]+/[0-9]+.[0-9]+:[0-9]+:[0-9]+," # The format of dates and times in this log log.format.date_format = "mm/dd/yyyy" log.format.time_format = "hh:mm:ss" # Use comma as the field separator log.format.field_separator = "," # Log fields log.fields = { computername = { label = "$lang_stats.field_labels.computername" type = "flat" index = 1 subindex = 0 } # computername servicename = { label = "$lang_stats.field_labels.servicename" type = "flat" index = 2 subindex = 0 } # servicename date = { label = "$lang_stats.field_labels.date" type = "date" index = 3 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 4 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time packet_type = { label = "$lang_stats.field_labels.packet_type" type = "flat" index = 5 subindex = 0 } # packet_type user_name = { label = "$lang_stats.field_labels.user_name" type = "flat" index = 6 subindex = 0 } # user_name fully_qualified_user_name = { label = "$lang_stats.field_labels.fully_qualified_user_name" type = "flat" index = 7 subindex = 0 } # fully_qualified_user_name called_station_id = { label = "$lang_stats.field_labels.called_station_id" type = "flat" index = 8 subindex = 0 } # called_station_id calling_station_id = { label = "$lang_stats.field_labels.calling_station_id" type = "flat" index = 9 subindex = 0 } # calling_station_id callback_number = { label = "$lang_stats.field_labels.callback_number" type = "flat" index = 10 subindex = 0 } # callback_number framed_ip_address = { label = "$lang_stats.field_labels.framed_ip_address" type = "flat" index = 11 subindex = 0 } # framed_ip_address nas_identifier = { label = "$lang_stats.field_labels.nas_identifier" type = "flat" index = 12 subindex = 0 } # nas_identifier nas_ip_address = { label = "$lang_stats.field_labels.nas_ip_address" type = "flat" index = 13 subindex = 0 } # nas_ip_address nas_port = { label = "$lang_stats.field_labels.nas_port" type = "flat" index = 14 subindex = 0 } # nas_port client_vendor = { label = "$lang_stats.field_labels.client_vendor" type = "flat" index = 15 subindex = 0 } # client_vendor client_ip_address = { label = "$lang_stats.field_labels.client_ip_address" type = "flat" index = 16 subindex = 0 } # client_ip_address client_friendly_name = { label = "$lang_stats.field_labels.client_friendly_name" type = "flat" index = 17 subindex = 0 } # client_friendly_name event_timestamp = { label = "$lang_stats.field_labels.event_timestamp" type = "flat" index = 18 subindex = 0 } # event_timestamp port_limit = { label = "$lang_stats.field_labels.port_limit" type = "flat" index = 19 subindex = 0 } # port_limit nas_port_type = { label = "$lang_stats.field_labels.nas_port_type" type = "flat" index = 20 subindex = 0 } # nas_port_type connect_info = { label = "$lang_stats.field_labels.connect_info" type = "flat" index = 21 subindex = 0 } # connect_info framed_protocol = { label = "$lang_stats.field_labels.framed_protocol" type = "flat" index = 22 subindex = 0 } # framed_protocol service_type = { label = "$lang_stats.field_labels.service_type" type = "flat" index = 23 subindex = 0 } # service_type authentication_type = { label = "$lang_stats.field_labels.authentication_type" type = "flat" index = 24 subindex = 0 } # authentication_type np_policy_name = { label = "$lang_stats.field_labels.np_policy_name" type = "flat" index = 25 subindex = 0 } # np_policy_name reason_code = { label = "$lang_stats.field_labels.reason_code" type = "flat" index = 26 subindex = 0 } # reason_code class = { label = "$lang_stats.field_labels.class" type = "flat" index = 27 subindex = 0 } # class session_timeout = { label = "$lang_stats.field_labels.session_timeout" type = "flat" index = 28 subindex = 0 } # session_timeout idle_timeout = { label = "$lang_stats.field_labels.idle_timeout" type = "flat" index = 29 subindex = 0 } # idle_timeout termination_action = { label = "$lang_stats.field_labels.termination_action" type = "flat" index = 30 subindex = 0 } # termination_action eap_friendly_name = { label = "$lang_stats.field_labels.eap_friendly_name" type = "flat" index = 31 subindex = 0 } # eap_friendly_name acct_status_type = { label = "$lang_stats.field_labels.acct_status_type" type = "flat" index = 32 subindex = 0 } # acct_status_type acct_delay_time = { label = "$lang_stats.field_labels.acct_delay_time" type = "flat" index = 33 subindex = 0 } # acct_delay_time acct_input_octet = { label = "$lang_stats.field_labels.acct_input_octet" type = "flat" index = 34 subindex = 0 } # acct_input_octet acct_output_octet = { label = "$lang_stats.field_labels.acct_output_octet" type = "flat" index = 35 subindex = 0 } # acct_output_octet acct_session_id = { label = "$lang_stats.field_labels.acct_session_id" type = "flat" index = 36 subindex = 0 } # acct_session_id acct_authentic = { label = "$lang_stats.field_labels.acct_authentic" type = "flat" index = 37 subindex = 0 } # acct_authentic acct_session_time = { label = "$lang_stats.field_labels.acct_session_time" type = "flat" index = 38 subindex = 0 } # acct_session_time acct_input_packet = { label = "$lang_stats.field_labels.acct_input_packet" type = "flat" index = 39 subindex = 0 } # acct_input_packet acct_output_packet = { label = "$lang_stats.field_labels.acct_output_packet" type = "flat" index = 40 subindex = 0 } # acct_output_packet acct_terminate_cause = { label = "$lang_stats.field_labels.acct_terminate_cause" type = "flat" index = 41 subindex = 0 } # acct_terminate_cause acct_multi_ssn_id = { label = "$lang_stats.field_labels.acct_multi_ssn_id" type = "flat" index = 42 subindex = 0 } # acct_multi_ssn_id acct_link_count = { label = "$lang_stats.field_labels.acct_link_count" type = "flat" index = 43 subindex = 0 } # acct_link_count acct_interim_interval = { label = "$lang_stats.field_labels.acct_interim_interval" type = "flat" index = 44 subindex = 0 } # acct_interim_interval tunnel_type = { label = "$lang_stats.field_labels.tunnel_type" type = "flat" index = 45 subindex = 0 } # tunnel_type tunnel_medium_type = { label = "$lang_stats.field_labels.tunnel_medium_type" type = "flat" index = 46 subindex = 0 } # tunnel_medium_type tunnel_client_endpt = { label = "$lang_stats.field_labels.tunnel_client_endpt" type = "flat" index = 47 subindex = 0 } # tunnel_client_endpt tunnel_server_endpt = { label = "$lang_stats.field_labels.tunnel_server_endpt" type = "flat" index = 48 subindex = 0 } # tunnel_server_endpt acct_tunnel_conn = { label = "$lang_stats.field_labels.acct_tunnel_conn" type = "flat" index = 49 subindex = 0 } # acct_tunnel_conn tunnel_pvt_group_id = { label = "$lang_stats.field_labels.tunnel_pvt_group_id" type = "flat" index = 50 subindex = 0 } # tunnel_pvt_group_id tunnel_assignment_id = { label = "$lang_stats.field_labels.tunnel_assignment_id" type = "flat" index = 51 subindex = 0 } # tunnel_assignment_id tunnel_preference = { label = "$lang_stats.field_labels.tunnel_preference" type = "flat" index = 52 subindex = 0 } # tunnel_preference ms_acct_auth_type = { label = "$lang_stats.field_labels.ms_acct_auth_type" type = "flat" index = 53 subindex = 0 } # ms_acct_auth_type ms_acct_eap_type = { label = "$lang_stats.field_labels.ms_acct_eap_type" type = "flat" index = 54 subindex = 0 } # ms_acct_eap_type ms_ras_version = { label = "$lang_stats.field_labels.ms_ras_version" type = "flat" index = 55 subindex = 0 } # ms_ras_version ms_ras_vendor = { label = "$lang_stats.field_labels.ms_ras_vendor" type = "flat" index = 56 subindex = 0 } # ms_ras_vendor ms_chap_error = { label = "$lang_stats.field_labels.ms_chap_error" type = "flat" index = 57 subindex = 0 } # ms_chap_error ms_chap_domain = { label = "$lang_stats.field_labels.ms_chap_domain" type = "flat" index = 58 subindex = 0 } # ms_chap_domain ms_ppe_encryption_type = { label = "$lang_stats.field_labels.ms_ppe_encryption_type" type = "flat" index = 59 subindex = 0 } # ms_ppe_encryption_type ms_mppe_encryption_policy = { label = "$lang_stats.field_labels.ms_mppe_encryption_policy" type = "flat" index = 60 subindex = 0 } # ms_mppe_encryption_policy } # log.fields # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day computername = { label = "$lang_stats.field_labels.computername" log_field = "computername" type = "string" suppress_top = 0 suppress_bottom = 2 } # computername servicename = { label = "$lang_stats.field_labels.servicename" log_field = "servicename" type = "string" suppress_top = 0 suppress_bottom = 2 } # servicename packet_type = { label = "$lang_stats.field_labels.packet_type" log_field = "packet_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # packet_type user_name = { label = "$lang_stats.field_labels.user_name" log_field = "user_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # user_name fully_qualified_user_name = { label = "$lang_stats.field_labels.fully_qualified_user_name" log_field = "fully_qualified_user_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # fully_qualified_user_name called_station_id = { label = "$lang_stats.field_labels.called_station_id" log_field = "called_station_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # called_station_id calling_station_id = { label = "$lang_stats.field_labels.calling_station_id" log_field = "calling_station_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # calling_station_id callback_number = { label = "$lang_stats.field_labels.callback_number" log_field = "callback_number" type = "string" suppress_top = 0 suppress_bottom = 2 } # callback_number framed_ip_address = { label = "$lang_stats.field_labels.framed_ip_address" log_field = "framed_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_ip_address nas_identifier = { label = "$lang_stats.field_labels.nas_identifier" log_field = "nas_identifier" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_identifier nas_ip_address = { label = "$lang_stats.field_labels.nas_ip_address" log_field = "nas_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_ip_address nas_port = { label = "$lang_stats.field_labels.nas_port" log_field = "nas_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port client_vendor = { label = "$lang_stats.field_labels.client_vendor" log_field = "client_vendor" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_vendor client_ip_address = { label = "$lang_stats.field_labels.client_ip_address" log_field = "client_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_ip_address client_friendly_name = { label = "$lang_stats.field_labels.client_friendly_name" log_field = "client_friendly_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_friendly_name event_timestamp = { label = "$lang_stats.field_labels.event_timestamp" log_field = "event_timestamp" type = "string" suppress_top = 0 suppress_bottom = 2 } # event_timestamp port_limit = { label = "$lang_stats.field_labels.port_limit" log_field = "port_limit" type = "string" suppress_top = 0 suppress_bottom = 2 } # port_limit nas_port_type = { label = "$lang_stats.field_labels.nas_port_type" log_field = "nas_port_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port_type connect_info = { label = "$lang_stats.field_labels.connect_info" log_field = "connect_info" type = "string" suppress_top = 0 suppress_bottom = 2 } # connect_info framed_protocol = { label = "Framed-Protocol" log_field = "framed_protocol" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_protocol service_type = { label = "$lang_stats.field_labels.service_type" log_field = "service_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # service_type authentication_type = { label = "$lang_stats.field_labels.authentication_type" log_field = "authentication_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # authentication_type np_policy_name = { label = "$lang_stats.field_labels.np_policy_name" log_field = "np_policy_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # np_policy_name reason_code = { label = "$lang_stats.field_labels.reason_code" log_field = "reason_code" type = "string" suppress_top = 0 suppress_bottom = 2 } # reason_code session_timeout = { label = "$lang_stats.field_labels.session_timeout" log_field = "session_timeout" type = "string" suppress_top = 0 suppress_bottom = 2 } # session_timeout idle_timeout = { label = "$lang_stats.field_labels.idle_timeout" log_field = "idle_timeout" type = "string" suppress_top = 0 suppress_bottom = 2 } # idle_timeout termination_action = { label = "$lang_stats.field_labels.termination_action" log_field = "termination_action" type = "string" suppress_top = 0 suppress_bottom = 2 } # termination_action eap_friendly_name = { label = "$lang_stats.field_labels.eap_friendly_name" log_field = "eap_friendly_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # eap_friendly_name acct_status_type = { label = "$lang_stats.field_labels.acct_status_type" log_field = "acct_status_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_status_type acct_delay_time = { label = "$lang_stats.field_labels.acct_delay_time" log_field = "acct_delay_time" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_delay_time acct_input_octet = { label = "$lang_stats.field_labels.acct_input_octet" log_field = "acct_input_octet" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_input_octet acct_output_octet = { label = "$lang_stats.field_labels.acct_output_octet" log_field = "acct_output_octet" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_output_octet acct_session_id = { label = "$lang_stats.field_labels.acct_session_id" log_field = "acct_session_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_session_id acct_authentic = { label = "$lang_stats.field_labels.acct_authentic" log_field = "acct_authentic" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_authentic acct_session_time = { label = "$lang_stats.field_labels.acct_session_time" log_field = "acct_session_time" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_session_time acct_input_packet = { label = "$lang_stats.field_labels.acct_input_packet" log_field = "acct_input_packet" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_input_packet acct_output_packet = { label = "$lang_stats.field_labels.acct_output_packet" log_field = "acct_output_packet" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_output_packet acct_terminate_cause = { label = "$lang_stats.field_labels.acct_terminate_cause" log_field = "acct_terminate_cause" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_terminate_cause acct_multi_ssn_id = { label = "$lang_stats.field_labels.acct_multi_ssn_id" log_field = "acct_multi_ssn_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_multi_ssn_id acct_link_count = { label = "$lang_stats.field_labels.acct_link_count" log_field = "acct_link_count" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_link_count acct_interim_interval = { label = "$lang_stats.field_labels.acct_interim_interval" log_field = "acct_interim_interval" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_interim_interval tunnel_type = { label = "$lang_stats.field_labels.tunnel_type" log_field = "tunnel_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_type tunnel_medium_type = { label = "$lang_stats.field_labels.tunnel_medium_type" log_field = "tunnel_medium_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_medium_type tunnel_client_endpt = { label = "$lang_stats.field_labels.tunnel_client_endpt" log_field = "tunnel_client_endpt" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_client_endpt tunnel_server_endpt = { label = "$lang_stats.field_labels.tunnel_server_endpt" log_field = "tunnel_server_endpt" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_server_endpt acct_tunnel_conn = { label = "$lang_stats.field_labels.acct_tunnel_conn" log_field = "acct_tunnel_conn" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_tunnel_conn tunnel_pvt_group_id = { label = "$lang_stats.field_labels.tunnel_pvt_group_id" log_field = "tunnel_pvt_group_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_pvt_group_id tunnel_assignment_id = { label = "$lang_stats.field_labels.tunnel_assignment_id" log_field = "tunnel_assignment_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_assignment_id tunnel_preference = { label = "$lang_stats.field_labels.tunnel_preference" log_field = "tunnel_preference" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_preference ms_acct_auth_type = { label = "$lang_stats.field_labels.ms_acct_auth_type" log_field = "ms_acct_auth_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_acct_auth_type ms_acct_eap_type = { label = "$lang_stats.field_labels.ms_acct_eap_type" log_field = "ms_acct_eap_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_acct_eap_type ms_ras_version = { label = "$lang_stats.field_labels.ms_ras_version" log_field = "ms_ras_version" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_ras_version ms_ras_vendor = { label = "$lang_stats.field_labels.ms_ras_vendor" log_field = "ms_ras_vendor" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_ras_vendor ms_chap_error = { label = "$lang_stats.field_labels.ms_chap_error" log_field = "ms_chap_error" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_chap_error ms_chap_domain = { label = "$lang_stats.field_labels.ms_chap_domain" log_field = "ms_chap_domain" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_chap_domain ms_ppe_encription_type = { label = "MS-PPE-Encription-Type" log_field = "ms_ppe_encription_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_ppe_encription_type ms_mppe_encryption_policy = { label = "$lang_stats.field_labels.ms_mppe_encryption_policy" log_field = "ms_mppe_encryption_policy" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_mppe_encryption_policy } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "client_ip_address" type = "unique" display_format_type = "integer" } # visitors } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" day_of_week = true hour_of_day = true computername = true servicename = true packet_type = true user_name = true fully_qualified_user_name = true called_station_id = true calling_station_id = true callback_number = true framed_ip_address = true nas_identifier = true nas_ip_address = true nas_port = true client_vendor = true client_ip_address = true client_friendly_name = true event_timestamp = true port_limit = true nas_port_type = true connect_info = true framed_protocol = true service_type = true authentication_type = true np_policy_name = true reason_code = true session_timeout = true idle_timeout = true termination_action = true eap_friendly_name = true acct_status_type = true acct_delay_time = true acct_input_octet = true acct_output_octet = true acct_session_id = true acct_authentic = true acct_session_time = true acct_input_packet = true acct_output_packet = true acct_terminate_cause = true acct_multi_ssn_id = true acct_link_count = true acct_interim_interval = true tunnel_type = true tunnel_medium_type = true tunnel_client_endpt = true tunnel_server_endpt = true acct_tunnel_conn = true tunnel_pvt_group_id = true tunnel_assignment_id = true tunnel_preference = true ms_acct_auth_type = true ms_acct_eap_type = true ms_ras_version = true ms_ras_vendor = true ms_chap_error = true ms_chap_domain = true ms_ppe_encription_type = true ms_mppe_encryption_policy = true } # report_groups } # create_profile_wizard_options not_supported = { sessions = true individualhosts = true pageviews = true bandwidth = true } # not_supported } # iasalt