Cisco Cisco Web Security Appliance S690 Guía Del Usuario
16
S A W M I L L F O R I R O N P O R T 7 . 3 . 3 U S E R G U I D E
Fixed: Sawmill for IronPort Does Not Allow Users to Enable WBRS in the Summarized
Logs Report
Logs Report
Sawmill for Ironport is not allowing a user to enable the WBRS variable from the Table
Options menu in the User Interface. Additionally, you cannot go to the profile.cfg for
Summarized Logs, and change the field_wbrs_value to True.
Options menu in the User Interface. Additionally, you cannot go to the profile.cfg for
Summarized Logs, and change the field_wbrs_value to True.
[Defect ID: 55664]
Fixed: Sawmill for IronPort Discards Session that are Over Two Hours Long
Sawmill for Ironport discards all work sessions that are over two hours long. The default
session length for Sawmill for Ironport is a maximum of two hours.
session length for Sawmill for Ironport is a maximum of two hours.
[Defect ID: 55242]
Fixed: Importing Access Logs Can Cause Sawmill for IronPort to Crash
Importing or updating the access logs can cause Sawmill for IronPort to crash.
Workaround: Import or update the access logs with a single processor, or set the Log
Processing Threads in the Configuration Master file to 0.
Processing Threads in the Configuration Master file to 0.
[Defect ID: 55020]
Fixed: Updating the Database in Sawmill for IronPort May Throw an Application Error at
the End of the Update
the End of the Update
When you update the database, Sawmill for IronPort may throw an application error at the
end of the update. This occurs regardless of the Log Processing Thread settings. However, the
update has been successful, and no data corruption has occurred. [Defect ID: 52227]
end of the update. This occurs regardless of the Log Processing Thread settings. However, the
update has been successful, and no data corruption has occurred. [Defect ID: 52227]
Fixed: Inaccurate Page View Statistics
The Page View calculations have been improved in Sawmill for IronPort version 7.3.1.
Previously, the Page View statistics within various reports included data that was not
necessary to make an accurate count of page views, such as entries for all responses. Now,
Page View statistics use a filter to ignore all dropped or blocked client requests as well as
server responses 1xx, 3xx, 4xx, and 5xx, none of which return data to the requested client.
However, image files are incorporated into the Page View calculations.
Previously, the Page View statistics within various reports included data that was not
necessary to make an accurate count of page views, such as entries for all responses. Now,
Page View statistics use a filter to ignore all dropped or blocked client requests as well as
server responses 1xx, 3xx, 4xx, and 5xx, none of which return data to the requested client.
However, image files are incorporated into the Page View calculations.
[Defect ID: 50257]
Fixed: Log Entries Containing Spaces in Usernames Do Not Appear in Reports
Previously, Sawmill for IronPort ignored log entries containing usernames with two or more
elements with space between them. For example, log entries for the user “barack 2” would
not appear in reports. This issue has been resolved.
elements with space between them. For example, log entries for the user “barack 2” would
not appear in reports. This issue has been resolved.
[Defect ID: 50075]
WSA_Sawmill.book Page 16 Tuesday, February 22, 2011 2:54 PM