I think it is a matter of speed. Do you want fwm logexport to do the unification or do you want whatever you are using to parse it to do unification (ie. shell or perl scripts, etc.)?
OR do you even need it... if you are looking for just counts on how many occurancces of a particular event then you don't need it. Unification involves more overhead, thats the bottom line. Christian Chiaverini > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf > Of Raymond N > Sent: Wednesday, January 12, 2005 6:25 PM > To: [email protected] > Subject: [FW-1] fwm logexport question on R55 > > Hi there, > Notice in R55 the "fwm logexport" cmd has a "-m <initial | > semi | raw>" > flag. I read the Checkpoint command line pdf file, and it > states that it is related to the ordering (unification) of > the log entries being exported. > However, I don't quite understand exactly when (or what type > of setup) would have benefit of using this parameter. Any > insight about how/when to use this parameter? > > Thanks. > > -Raymond > > ================================================= > To set vacation, Out-Of-Office, or away messages, send an > email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your subscription > options, email [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
