Cisco Cisco Email Security Appliance C160 Mode D'Emploi

When this option is enabled, the original subject header of each message is included in the log.

In some cases, it is necessary to record the presence and contents of a message’s headers as they pass 
through the system. You specify the headers to record in the Log Subscriptions Global Settings page (or 
via the 

logconfig

 -> 

logheaders

 subcommand in the CLI). The Email Security appliance records the 

specified message headers in the Text Mail Logs, the Delivery Logs, and the Bounce Logs. If the header 
is present, the system records the name of the header and the value. If a header is not present, nothing is 
recorded in the logs.

The system evaluates all headers that are present on a message, at any time during the processing of the 
message for recording, regardless of the headers specified for logging.

The RFC for the SMTP protocol is located at 

http://www.faqs.org/rfcs/rfc2821.html

 and defines user-defined headers. 

If you have configured headers to log via the 

logheaders

 command, the header information appears after 

the delivery information:

For example, specifying “date, x-subject” as headers to be logged will cause the following line to appear 
in the mail log:

Choose System Administration > Log Subscriptions.

Tue May 31 09:20:27 2005 Info: Start MID 2 ICID 2

Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 From: <mary@example.com>

Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 RID 0 To: <joe@example.com>

Tue May 31 09:20:27 2005 Info: MID 2 Message-ID '<44e4n$2@example.com>'

Tue May 31 09:20:27 2005 Info: MID 2 Subject 'Monthly Reports Due'

Name of the header

Contents of the logged header