US 11,711,344 B2
System and method for creating buffered firewall logs for reporting
Michael Oliver O'Mahony, Cork (IE); Nicole Carin Petersen, Cork (IE); Mandar Harish Harkare, Cork (IE); and Damien Christopher Monaghan, Cork (IE)
Assigned to FORCEPOINT LLC, Austin, TX (US)
Filed by Forcepoint LLC, Austin, TX (US)
Filed on Apr. 30, 2020, as Appl. No. 16/862,655.
Prior Publication US 2021/0344649 A1, Nov. 4, 2021
Int. Cl. G06F 21/00 (2013.01); H04L 9/40 (2022.01); G06F 11/34 (2006.01); G06F 9/48 (2006.01); G06F 11/30 (2006.01); G06F 9/451 (2018.01)
CPC H04L 63/0263 (2013.01) [G06F 9/451 (2018.02); G06F 9/4881 (2013.01); G06F 11/3086 (2013.01); G06F 11/3476 (2013.01); H04L 63/1425 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for firewall data log processing, comprising:
a firewall logging system operating on a first processor and being a hardware processor and having a memory configured to execute components of the hardware processor to cause the first processor to receive firewall log data and to process the firewall log data on a periodic basis to reduce a size of the firewall log data;
a firewall reporting system operating on a second processor and configured to process the reduced size firewall log data to generate a report on a user interface that includes one or more analytics from the reduced size firewall data; and
an extract, transform and load service operating on a third processor and configured to extract two or more subsets of data from the firewall log data, to transform the extracted firewall log data into a metadata schema and to load the metadata schema into a data processing system configured to analyze the firewall log data using the metadata schema.