Cisco Cisco Web Security Appliance S690 사용자 가이드
Chapter 24 Logging
Working with Log Subscriptions
24-12
Cisco IronPort AsyncOS 7.1 for Web User Guide
OL-23207-01
•
Transfers the newly saved log file to a remote host when the log retrieval
method is push-based. For a list of the log retrieval methods, see
method is push-based. For a list of the log retrieval methods, see
.
•
Transfers any previously unsuccessful log files from the same subscription
when the log retrieval method is push-based.
when the log retrieval method is push-based.
•
Deletes the oldest file in the log subscription if the total number of files to
keep on hand has been exceeded when the log retrieval method is poll-based.
keep on hand has been exceeded when the log retrieval method is poll-based.
AsyncOS rolls over log subscriptions in the following ways:
•
Manually. The appliance administrator can manually roll over log
subscriptions on demand from either the web interface or the CLI. Use the
Rollover Now button on the System Administration > Log Subscriptions
page, or the
subscriptions on demand from either the web interface or the CLI. Use the
Rollover Now button on the System Administration > Log Subscriptions
page, or the
rollovernow
CLI command. The
rollovernow
command allows
you to roll over all log files at once or select a specific log file from a list.
•
Automatically. AsyncOS rolls over log subscriptions based on the first
user-specified limit reached: maximum file size or maximum time. Log
subscriptions based on the FTP poll retrieval method create files and store
them in the FTP directory on the appliance until they are retrieved from a
remote FTP client, or until the system needs to create more space for log files.
user-specified limit reached: maximum file size or maximum time. Log
subscriptions based on the FTP poll retrieval method create files and store
them in the FTP directory on the appliance until they are retrieved from a
remote FTP client, or until the system needs to create more space for log files.
To roll over a log subscription in the web interface:
Step 1
Navigate to the System Administration > Log Subscriptions page.
Step 2
Click the check box under the Rollover column for each log subscription you want
to roll over.
to roll over.
Step 3
Click Rollover Now.
Working with Compressed Log Files
To save disk space on the Web Security appliance, log subscriptions can compress
rolled over log files before storing them on the disk. Only rolled over logs are
compressed. The current active log file is not compressed.
rolled over log files before storing them on the disk. Only rolled over logs are
compressed. The current active log file is not compressed.
Each log subscription has its own log compression setting, so you can choose
which log subscriptions to compress. AsyncOS compresses log files using the
gzip compression format.
which log subscriptions to compress. AsyncOS compresses log files using the
gzip compression format.