Cisco Cisco Unified Contact Center Enterprise 9.0(2) Installation Guide

Then click View log. (Clicking on Purge log deletes all events stored in securitylog.txt, though 
csalog.txt will continue to contain that information.)

You can also:

Copy securitylog.txt to a machine that has Excel and change the name to securitylog.csv.

Double-click securitylog.csv and it will open as an Excel spreadsheet.

You may find it most convenient to see the contents of a spreadsheet cell by clicking on the cell 
and looking at the contents in the field above the spreadsheet matrix.

For diagnosing problems, the most important fields are DateTime, Severity, Text, and User. Ignore 
the RawEvent field; it contains essentially the same information that is presented in the other fields, 
but in an unprocessed, and difficult to read, form.

The ordering of the severity levels, from least to most severe, is: Information, Notice, Warning, 
Error, Alert, Critical, Emergency.

Cisco Security Agent caches your responses to queries. This is a convenience feature, so that you do not 
have to respond to a popup each time you do a repetitive action.

When users are queried, the Agent can remember the response permanently or temporarily. This way, if 
the same rule is triggered again, the action is allowed, denied, or terminated based on what answer was 
given previously with no popup query box appearing again either permanently or for some period of 
time.

For example, if a user is queried as to whether an application can talk on the network and the user 
responds by selecting the Yes radio button and clicking a Don't ask me again checkbox, the Yes 
response is remembered permanently and that response appears in the edit field in the User Query 
Response window (double-click on the flag icon, then click on User Query Response, on the left, under 
Status). But if the user is queried as to whether setup.exe can install software on the system and the user 
responds by selecting the Yes radio button, but there is no Don't ask me again checkbox or it is there 
but the user does not select it, this response is remembered temporarily and it does not appear in the User 
Query Response window.

If the user response is only cached temporarily (for approximately an hour), the user can click the Clear 
button in User Query Response window to delete all temporarily cached responses. To clear permanent 
responses listed in the edit field, the user must select the response in the edit field and press the Delete 
key.

Permanent responses are remembered across reboots. Temporarily cached responses are not remembered 
across reboots. Also note, a query response is tied to the user who responded. On multi-user machines, 
multiple users may be asked the same question.

Please consider the following troubleshooting suggestions before contacting the Cisco Technical 
Assistance Center (TAC).