Cisco Cisco Web Security Appliance S670 Guida Utente
20-5
AsyncOS 8.1 for Cisco Web Security User Guide
Chapter 20 Monitor System Activity Through Logs
Adding and Editing Log Subscriptions
Step 2
To add a log subscription, click Add Log Subscription. Or, to edit a log subscription, click the name of
the log file in the Log Name field.
the log file in the Log Name field.
Step 3
Complete the subscription option.
Option
Description
Log Type
A list of available log file types that you can subscribe to. The other options
on the page may change according to log file type you choose.
on the page may change according to log file type you choose.
Note
The Request Debug Logs log type can only be subscribed to using
the CLI and does not appear on this list.
the CLI and does not appear on this list.
Log Name
The name used to refer to the subscription on the Web Security appliance.
This name is also used for the log directory which will store the log files for
the subscription.
This name is also used for the log directory which will store the log files for
the subscription.
Rollover by File Size
The maximum file size to which the current log file can grow before it is
archived and a new log file started. You must enter a number between 100
kilobytes and 10 gigabytes.
archived and a new log file started. You must enter a number between 100
kilobytes and 10 gigabytes.
Rollover by Time
The maximum time interval before the current log file is archived and a new
log file started. The following interval types are available:
log file started. The following interval types are available:
•
None. AsyncOS only performs a rollover when the log file reaches the
maximum file size.
maximum file size.
•
Custom Time Interval. AsyncOS performs a rollover after a specified
amount of time has passed since the previous rollover. Specify the
number of days, hours, minutes, and seconds between rollovers using
amount of time has passed since the previous rollover. Specify the
number of days, hours, minutes, and seconds between rollovers using
d
,
h
,
m
, and
s
as suffixes.
•
Daily Rollover. AsyncOS performs a rollover every day at a specified
time. Separate multiple times a day using a comma. Use an asterisk (*)
for the hour to have rollover occur every hour during the day. You can
also use an asterisk to rollover every minute of an hour.
time. Separate multiple times a day using a comma. Use an asterisk (*)
for the hour to have rollover occur every hour during the day. You can
also use an asterisk to rollover every minute of an hour.
•
Weekly Rollover. AsyncOS performs a rollover on one or more days of
the week at a specified time.
the week at a specified time.
Log Style
(Access Logs)
Specifies the log format to use, either Squid, Apache, or Squid Details.
Custom Fields
(Access Logs)
Allows you to include custom information in each access log entry.
The syntax for entering format specifiers in the Custom Field is as follows:
<format_specifier_1> <format_specifier_2> ...
For example:
%a %b %E
You can add tokens before the format specifiers to display descriptive text in
the access log file. For example:
the access log file. For example:
client_IP %a body_bytes %b error_type %E
where
client_IP
is the description token for log format specifier
%a
, and so
on.
File Name
The name of the log files. Current log files are appended with a
.c
extension
and rolled over log files are appended with the file creation timestamp and a
.s
extension.