Barracuda Web streaming logs in incorrect format

[Gareth Warn]

Hi,

We have a Barracuda F-Series Next Gen firewall being used for VPN. I would like to use the web streaming service available in Barracuda to send the log files to MCAS.

I've configured a log collector and the files are being received and sent onto MCAS. However the governance log is stating the format is incorrect.

I've raised the case with Barracuda as to what the format should be and they have validated that the config from their side looks correct.

Has anyone had experience with Barracuda web logs and MCAS setup and could anyone point me to how I can view the the log files being received by MCAS to share with Barracuda?

Unfortunatley I dont have an alternate Syslog server to send the files to.

Any advice would be appreciated.

[#2]

hello, you can get the actual data being received by the log collector in the 'messages' file inside the container. following are to be executed on the host running the log collector container
docker ps <- to get the name of the container
docker exec -it <containerName> bash <- to open a terminal session in to the container
cd var/adallom/syslog/<portOnWhichDataIsReceived> <- this is where you should find a 'messages' file if the collector is receiving data
cat messages <- will dump contents
or you can copy the entire file out to the host using docker cp

[#3]

@rajatm Thanks for the advice, I've now obtained the message file and provided to Barracuda for them to review.

[#4]

I've received a response from Barracuda that they have now logged this as a BUG so will update this thread if and when its resolved

[#5]

Hi Gareth, have you had any luck with this? We're in the same boat.