Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1181
 
39-47
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
 
Chapter 39      Logging
  Log Subscriptions
Logging Message Headers
In some cases, it is necessary to record the presence and contents of a message’s headers as they pass 
through the system. You specify the headers to record in the Log Subscriptions Global Settings page (or 
via the 
logconfig
 -> 
logheaders
 subcommand in the CLI). The Email Security appliance records the 
specified message headers in the Text Mail Logs, the Delivery Logs, and the Bounce Logs. If the header 
is present, the system records the name of the header and the value. If a header is not present, nothing is 
recorded in the logs.
Note
The system evaluates all headers that are present on a message, at any time during the processing of the 
message for recording, regardless of the headers specified for logging.
Note
The RFC for the SMTP protocol is located at 
http://www.faqs.org/rfcs/rfc2821.html
 and defines user-defined headers. 
Note
If you have configured headers to log via the 
logheaders
 command, the header information appears after 
the delivery information:
For example, specifying “date, x-subject” as headers to be logged will cause the following line to appear 
in the mail log:
Configuring Global Settings for Logging Using the GUI
Procedure 
Step 1
Choose System Administration > Log Subscriptions.
Step 2
Scroll down to the Global Settings section. 
Step 3
Click Edit Settings
Step 4
Specify information including the system measurement frequency, whether to include Message-ID 
headers in mail logs, whether to include the remote response, and whether to include the original subject 
header of each message.
Step 5
Enter any other headers you wish to include in the logs.
Step 6
Submit and commit your changes.
Table 39-34
Log Headers 
Header name
Name of the header
Value
Contents of the logged header
Tue May 31 10:14:12 2005 Info: Message done DCID 0 MID 3 to RID [0] [('date', 'Tue, 31 
May 2005 10:13:18 -0700'), ('x-subject', 'Logging this header')]