Cisco Cisco Web Security Appliance S170 Guia De Resolução De Problemas

Contributed by John Yu and Siddharth Rajpathak, Cisco TAC
Engineers.

Oct 13, 2014

How do I create and configure logs on the Cisco Email Security Appliance (ESA)?

An important feature within the Cisco Email Security appliance (ESA) is its logging capabilities. AsyncOS on
ESA can generate many types of logs, recording varying types of information. Log files contain the records of
regular operations and exceptions from various components of the system. This information can be valuable
while monitoring Cisco ESA as well as during troubleshooting of an issue or checking performance.

Logs can be configured and created from the CLI  using "logconfig" command or via the GUI under 'System
Administration' > 'Log Subscriptions' > 'Add Log Subscription ...'

Below is an example of creating a LDAP debug log subscription using the CLI:.

−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−

Currently configured logs:

1. "antivirus" Type: "Anti−Virus Logs" Retrieval: FTP Poll

2. "avarchive" Type: "Anti−Virus Archive" Retrieval: FTP Poll

3. "bounces" Type: "Bounce Logs" Retrieval: FTP Poll

4. "brightmail" Type: "Symantec Brightmail Anti−Spam Logs" Retrieval: FTP Poll

5. "cli_logs" Type: "CLI Audit Logs" Retrieval: FTP Poll

Choose the operation you want to perform:

− NEW − Create a new log.

− EDIT − Modify a log subscription.

− DELETE − Remove a log subscription.

− SETUP − General settings.

− LOGHEADERS − Configure headers to log.

− HOSTKEYCONFIG − Configure SSH host keys.

[]>  NEW

Choose the log file type for this subscription:

...

2. qmail Format Mail Logs