Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1212
 
39-3
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 39      Logging
  Overview
GUI Logs 
See HTTP Logs. 
HTTP Logs
HTTP logs record information about the HTTP and/or secure HTTP services 
enabled on the interface. Because the graphical user interface (GUI) is 
accessed via HTTP, the HTTP logs are ostensibly the GUI equivalent of the 
CLI Audit logs. Session data (new session, session expired) and pages 
accessed in the GUI are recorded. 
These logs also include information about SMTP transactions, for example 
information about scheduled reports emailed from the appliance. 
NTP Logs
NTP logs record the conversation between the appliance and any NTP 
(Network Time Protocol) servers configured. For more information, see 
“Editing the Network Time Protocol (NTP) Configuration (Time Keeping 
Method)” in the “System Administration” chapter. 
LDAP Debug Logs
LDAP debug logs are meant for debugging LDAP installations. (See the 
“LDAP Queries” chapter.) Useful information about the queries that the 
Email Security appliance is sending to the LDAP server are recorded here. 
Anti-Spam Logs
Anti-spam logs record the status of the anti-spam scanning feature of your 
system, including the status on receiving updates of the latest anti-spam 
rules. Also, any logs related to the  Context Adaptive Scanning Engine are 
logged here. 
Anti-Spam Archive
If you enabled an Anti-Spam scanning feature, messages that are scanned 
and associated with the “archive message” action are archived here. The 
format is an mbox-format log file.   For more information about anti-spam 
engines, see the “Anti-Spam” chapter.
Graymail Engine Logs
Contains information about the graymail engine, status, configuration, and 
so on. Most information is at Info or Debug level.
Graymail Archive
Contains archived messages (the messages that are scanned and associated 
with the “archive message” action). The format is an mbox-format log file.
Anti-Virus Logs
AntiVirus logs record the status of the anti-virus scanning feature of your 
system, including the status on receiving updates of the latest anti-virus 
identity files. 
Anti-Virus Archive
If you enabled an anti-virus engine, messages that are scanned and associated 
with the “archive message” action are archived here. The format is an 
mbox-format log file. For more information, see the  “Anti-Virus” chapter.
AMP Engine Logs
The AMP Engine logs record the status of the Advanced Malware Protection 
features of the system. For more information, see 
AMP Archive 
If you have configured mail policies to archive messages that Advanced 
Malware Protection engine has found to have attachments that are 
unscannable or contain malware, those messages are archived here. The 
format is an mbox-format log file.
Scanning Logs
The scanning log contains all LOG and COMMON messages for scanning 
engines (see 
). This is typically application faults, alert 
sent, alert failed, and log error messages. This log does not apply to 
system-wide alerts.
Table 39-1
Log Types (continued)
Log
Description