XML Schema and DTD for the WatchGuard Log File

With the release of WatchGuard System Manager 8.0, the format used for the WatchGuard log file is extensible markup language (XML). XML is programming code designed especially for Web documents. It allows designers to create their own custom tags for the definition, transmission, validation, and interpretation of data between applications and between organizations. Because the standard is widely used, there are many applications available to view and edit XML files.

In previous releases, all logs were written in a proprietary format and could only be seen using Watch-Guard's proprietary log monitoring tools. To better understand the new log structure, we supply an XML schema and Document Type Definition (DTD) for the WatchGuard log file. The two documents give the same type of information. We recommend you open the file you are most comfortable with, using an XML editor such as Altova's XML Spy.

The XML schema for the WatchGuard log file gives a hierarchical definition of the fields used in a Watch-Guard log message. It shows you:

All log file fields, by element
Field definitions, including the type of data used in the field and if the field is required
The basic log file structure

Any difference, at the attribute level, between log messages created on a Firebox operating with WFS appliance software and a Firebox operating with Fireware appliance software.

The XML schema for Fireboxes with WFS appliance software and Fireware appliance software is the same. Some fields (attributes) only appear in the log file of one type of appliance software, or the other. In the schema, these exceptions are only noted if they could cause confusion. This information, if supplied, is given in a comment for the attribute.

Return to Top