Cisco Cisco Web Security Appliance S360 User Guide

Page of 619
 
28-13
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
 
Chapter 28      Common Tasks
Automating Log File Transfers
Automating Log File Transfers
In this task, you will configure the appliance so it automatically transfers the access logs using SCP to 
a remote server every day at noon and midnight. You might want to do this if you want each log file to 
contain web access information for the same amount of time (12 hours).
For example, you use a third party tool to analyze the web data in the access logs each day, and you want 
each access log file to contain data for the exact same amount of time, 12 hours.
This task assumes you have access to an SCP server, including the host name, directory, and username.
Step 1
Navigate to the System Administration > Log Subscriptions page.
Step 2
Click the “accesslogs” link under the Log Name column.
Step 3
On the Edit Log Subscription page, in the Rollover by Time field, choose “Daily Rollover.”
Step 4
In the Time of Day field, enter the following text:
00:00, 12:00
 
Note
You can automatically transfer log files multiple times a day by entering multiple times 
separated by a comma.
Step 5
In the Retrieval Method section, choose “SCP on Remote Server.”
Step 6
Enter the required SCP server information, such as SCP host name and username.
Step 7
Leave other settings as is, or change as desired.
Step 8
Submit and commit your changes.
Now, AsyncOS for Web transfer the newly saved log file to the SCP server each day at noon and 
midnight. For more details on the tasks AsyncOS for Web performs when it rolls over a log file, see 
Where to Find More Information
You can read the following sections for more detailed information on the steps included in this task:
  •
  •