Cisco Cisco Email Security Appliance X1070 Guía Para Resolver Problemas
[]> test
Do you want this search to be case insensitive? [Y]>
Do you want to tail the logs? [N]>
Do you want to paginate the output? [N]>
Mon Jan 23 10:25:03 2006 Info: SMTP listener testpairlist starting
Tue Jan 24 12:10:15 2006 Info: Message aborted MID 8 Dropped by filter
'testdrop'
Tue Jan 31 23:55:38 2006 Info: MID 32 Subject 'testmsgquarantine'
Wed Feb 1 00:23:59 2006 Info: MID 62 Subject 'testmsgquarantine'
Wed Feb 1 00:27:48 2006 Info: MID 64 Subject 'testmsg2'
Wed Feb 1 22:30:37 2006 Info: MID 80 Subject 'test zip'
Wed Feb 1 22:37:51 2006 Info: MID 83 Subject 'FW: test zip'
Wed Feb 1 22:41:50 2006 Info: MID 84 Subject 'FW: test zip'
Fri Feb 3 15:17:47 2006 Info: MID 94 Subject 'test'
Fri Feb 3 15:42:06 2006 Info: MID 96 Subject 'test'
This generated several matches that contained test in the subject. The message was sent at
approximately 3:42pm, so you can use that MID for the next search.
approximately 3:42pm, so you can use that MID for the next search.
Here are some impotant points to note about the questions:
Do you want this search to be case insensitive? [Y]>
If you answer Yes to this question, it finds entries regardless of case.
If you answer Yes to this question, it finds entries regardless of case.
♦
Do you want to tail the logs? [N]>
If you answer Yes to this question, it only finds new entries as they are generated. It does not
search all of the log files. Choose No in order to search all of the logs.
If you answer Yes to this question, it only finds new entries as they are generated. It does not
search all of the log files. Choose No in order to search all of the logs.
♦
Do you want to paginate the output? [N]>
If you answer Yes to this question, it displays entries one page at a time. This is useful if you
need to do a general search and expect to retrieve many entries. This stops the entries from
scrolling off of the display.
If you answer Yes to this question, it displays entries one page at a time. This is useful if you
need to do a general search and expect to retrieve many entries. This stops the entries from
scrolling off of the display.
♦
Search for the MID:
mail.example.com> grep
Currently configured logs:
16. "mail_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
Enter the number of the log you wish to grep.
[]> 16
Enter the regular expression to grep.
[]> MID 96
Do you want this search to be case insensitive? [Y]>
Do you want to tail the logs? [N]>
Do you want to paginate the output? [N]>
Fri Feb 3 15:41:43 2006 Info: Start MID 96 ICID 10394
Fri Feb 3 15:41:43 2006 Info: MID 96 ICID 10394 From: <bob@example.net>
Fri Feb 3 15:41:58 2006 Info: MID 96 ICID 10394 RID 0 To:
<nasir@example.com>
Fri Feb 3 15:42:06 2006 Info: MID 96 Message−ID
<4o8836$30@mail.example.com>
Fri Feb 3 15:42:06 2006 Info: MID 96 Subject 'test'
Fri Feb 3 15:42:06 2006 Info: MID 96 ready 23 bytes from
<bob@example.net>
Fri Feb 3 15:42:06 2006 Info: MID 96 matched all recipients for
per−recipient policy DEFAULT in the outbound table
2.