Extracting requests from reverse-proxy legal logs storage offers numerous advantages, including enhanced security by detecting and mitigating threats like DDoS attacks, ensuring regulatory compliance for audits, and optimizing system performance by identifying bottlenecks.
It enables faster troubleshooting, provides insights into user behavior for informed decision-making, and supports forensic investigations during security incidents.
Additionally, it helps reduce infrastructure costs, facilitates custom reporting for actionable insights, aids in scalability planning, and provides reliable data for legal disputes or investigations.
Overall, it strengthens security, improves efficiency, and supports compliance and business growth.This feature is available in Artica v4.50 Service Pack 1 or Artica v4.50 Hotfix 20250112-21
- On the left, menu go to
Legal Logs>History search - Click on the button “New search Reverse Proxy”
Be careful with your search, Artica will look for information in compressed files.
This means it will decompress files that match the search period and look for your criteria.
Therefore, be as precise as possible to reduce the intensity of machine performance required.
- The "Max Lines" field allows you to extract the last x lines that were found.
- All search fields (except the HTTP code) accept the
*character to expand the search for characters. - The URL field refers to the request without the domain, so just specify a pattern to find the path (e.g., *toto.png).
- The Website field indicates the target domain of the requests.
- If the defined period does not correspond to any legal file found, an error will be displayed below your query and you will not be able to launch your search.
- If the period indicated corresponds to legal files, the table will tell you how many files will be analyzed to extract your search.
- To run the search, click on the “Launch searchs” button to execute queries that have not yet been analyzed.
- When the search is completed, the table displays the number of entries found in the log files that match the specified date range.
- You can click on the magnify in order to get a view of logs.
