Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 408
 
15-3
AsyncOS 8.3.5 for Cisco Content Security Management User Guide
 
Chapter 15      Logging
  Logging Overview
or 
Every day, at the time(s) you specify 
or 
On the days of the week that you select, at the time(s) you specify 
When you specify times, use the 24-hour format, for example 
23:00
 for 11pm. 
To schedule multiple rollover times in a day, separate times with a comma. For example, to roll over logs 
at midnight and noon, enter 
00:00, 12:00 
Use an asterisk (*) as a wildcard. 
For example, to roll over logs exactly at every hour and half-hour, enter 
*:00, *:30
 
When the specified limit is reached (or the first limit is reached, if you have configured both size- and 
time-based limits), the log file is rolled over. Log subscriptions based on the FTP poll transfer 
mechanism create files and store them in the FTP directory on the appliance until they are retrieved or 
until the system needs more space for log files. 
Note
If a rollover is in progress when the next limit is reached, the new rollover is skipped. An error will be 
logged and an alert sent. 
Timestamps in Log Files
The following log files include the beginning and ending date of the log itself, the version of AsyncOS, 
and the GMT offset (provided in seconds at the beginning of the log):
Mail log
Safelist/blocklist log
System log
Logs Enabled by Default
The Security Management appliance is preconfigured with the following log subscriptions enabled.
Table 15-2
Preconfigured Log Subscriptions 
Log Name
Log Type
Retrieval Method
cli_logs
CLI audit logs
FTP Poll
euq_logs
Spam quarantine logs
FTP Poll
euqgui_logs
Spam quarantine GUI logs
FTP Poll
gui_logs
HTTP logs
FTP Poll
mail_logs
Text mail logs
FTP Poll
reportd_logs
Reporting logs
FTP Poll
reportqueryd_logs
Reporting query logs
FTP Poll
slbld_logs
Safelist/blocklist logs
FTP Poll
smad_logs
SMA logs
FTP Poll