Cisco Cisco Email Security Appliance C160 Guía Del Usuario
38-42
Cisco AsyncOS 9.5 for Email User Guide
Chapter 38 Logging
Log Subscriptions
When this option is enabled, the original subject header of each message is included in the log.
Logging Message Headers
In some cases, it is necessary to record the presence and contents of a message’s headers as they pass
through the system. You specify the headers to record in the Log Subscriptions Global Settings page (or
via the
through the system. You specify the headers to record in the Log Subscriptions Global Settings page (or
via the
logconfig
->
logheaders
subcommand in the CLI). The Email Security appliance records the
specified message headers in the Text Mail Logs, the Delivery Logs, and the Bounce Logs. If the header
is present, the system records the name of the header and the value. If a header is not present, nothing is
recorded in the logs.
is present, the system records the name of the header and the value. If a header is not present, nothing is
recorded in the logs.
Note
The system evaluates all headers that are present on a message, at any time during the processing of the
message for recording, regardless of the headers specified for logging.
message for recording, regardless of the headers specified for logging.
Note
The RFC for the SMTP protocol is located at
http://www.faqs.org/rfcs/rfc2821.html
and defines user-defined headers.
Note
If you have configured headers to log via the
logheaders
command, the header information appears after
the delivery information:
For example, specifying “date, x-subject” as headers to be logged will cause the following line to appear
in the mail log:
in the mail log:
Configuring Global Settings for Logging Using the GUI
Procedure
Step 1
Choose System Administration > Log Subscriptions.
Tue May 31 09:20:27 2005 Info: Start MID 2 ICID 2
Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 From: <mary@example.com>
Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 RID 0 To: <joe@example.com>
Tue May 31 09:20:27 2005 Info: MID 2 Message-ID '<44e4n$2@example.com>'
Tue May 31 09:20:27 2005 Info: MID 2 Subject 'Monthly Reports Due'
Table 38-34
Log Headers
Header name
Name of the header
Value
Contents of the logged header
Tue May 31 10:14:12 2005 Info: Message done DCID 0 MID 3 to RID [0] [('date', 'Tue, 31
May 2005 10:13:18 -0700'), ('x-subject', 'Logging this header')]