Cisco Cisco Web Security Appliance S370 사용자 가이드
W O R K I N G W I T H M U L T I P L E W E B S E C U R I T Y A P P L I A N C E S
C H A P T E R 5 : G U I D E L I N E S A N D T I P S
75
WO R K I N G W I T H M U L T I P L E WE B S E C U R I T Y A P P L I A N C E S
If Sawmill for IronPort analyzes access logs from multiple Web Security appliances, place the
access logs for each appliance in its own directory underneath a single directory. For
example, if you have 3 appliances, you might have a directory called “WSA_access_logs” and
underneath that directory have three directories called “WSA01,” “WSA02,” and “WSA03.”
access logs for each appliance in its own directory underneath a single directory. For
example, if you have 3 appliances, you might have a directory called “WSA_access_logs” and
underneath that directory have three directories called “WSA01,” “WSA02,” and “WSA03.”
WSA_access_logs
WSA01
WSA02
WSA03
When you place each access log in a separate subdirectory, verify that the profile processes
data in all subdirectories. You can specify this when you create a profile, or at any time by
going to Profile > Log Data > Log Source and enabling the “Process subfolders (local folders
only)” field.
data in all subdirectories. You can specify this when you create a profile, or at any time by
going to Profile > Log Data > Log Source and enabling the “Process subfolders (local folders
only)” field.
WSA_Sawmill.book Page 75 Tuesday, February 22, 2011 2:54 PM