Cisco Cisco Web Security Appliance S380 User Guide

Page of 430
 
20-3
Cisco AsyncOS 8.0.6 for Web User Guide
 
Chapter 20      Monitor System Activity Through Logs
  Log File Viewing
Note
If a log subscription is compressed, you must download it before you can decompress and open 
it.
Viewing Log Files Using the Command Line Interface
Step 1
Access the CLI.
Step 2
Enter the 
tail
 command:
example.com> tail
Currently configured logs:
1. "accesslogs" Type: "Access Logs" Retrieval: FTP Poll
2. "authlogs" Type: "Authentication Framework Logs" Retrieval: FTP Poll
3. "avc_logs" Type: "AVC Engine Logs" Retrieval: FTP Poll
4. "bs_access_test" Type: "Access Logs" Retrieval: FTP Poll
[...Output truncated...]
34. "uds_logs" Type: "UDS Logs" Retrieval: FTP Poll
35. "updater_logs" Type: "Updater Logs" Retrieval: FTP Poll
36. "wbnp_logs" Type: "WBNP Logs" Retrieval: FTP Poll
37. "webcat_logs" Type: "Web Categorization Logs" Retrieval: FTP Poll
38. "webrootlogs" Type: "Webroot Logs" Retrieval: FTP Poll
39. "welcomeack_logs" Type: "Welcome Page Acknowledgement Logs" Retrieval: FTP
Poll
Enter the number of the log you wish to tail.
[]>
Step 3
Enter a number corresponding to the log file you wish to view
[]> 1
Press Ctrl-C to stop.
#Version: 1.0
#Date: yyyy-mm-dd hh:mm:ss
#System: 172.x.x.x - example.com
#Software: AsyncOS for Web 8.0.0-xxx
#Fields: %t %e %a %w/%h %s %2r %A %H/%d %c %D %Xr 
%?BLOCK_SUSPECT_USER_AGENT,MONITOR_SUSPECT_USER_AGENT?%<User-Agent:%!%-%.
The current log file contents are displayed and the screen updates with new log activity as it occurs. 
Step 4
Press CTRL-C when finishedto stop the trace.