How to export logs from an SSB logspace (4271296)

Logs may be downloaded in csv format via the user interface but this is not recommended for large amounts of data as exporting data can be very slow, especially if the system is under heavy load.

If there is a requirement to export large amounts of data on a regular basis then it is recommended that the SSB RPC API is used.

It is recommended that SSB RPC API is used to export large amounts of data or if logs are needed to be exported on a regular basis. The API commands can then be saved into a script which can in turn be executed as required or on a regular basis using cron or similar scheduling tools. However, the development of scripts is not done or supported by technical support.

For more details on the SSB RPC API please see

https://support.oneidentity.com/technical-documents/syslog-ng-store-box/7.2.0/administration-guide/66#TOPIC-2031085

For an introduction to the RPC API please see

https://support.oneidentity.com/technical-documents/syslog-ng-store-box/7.2.0/rpc-api-quickstart-guide

For assistance with scripting please contact One Identity Professional Services.

https://support.oneidentity.com/syslog-ng-store-box/professional-services