cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-418
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

300
Views
0
Helpful
0
Replies

[ESA] Custom Log Fields per Syslog (CEF)

I am looking for a way to transmit Custom Log Fields via Syslog (CEF format).

Currently it seems that you can only transfer the default log fields:
But I would like to transfer additional log information, which I write e.g. via a content filter or message filter.
As a workaround it would be sufficient if I could see in the transmitted log which content filter is '"matched", but this is apparently not possible, because you can only see if a CF is matched (ESACFVerdict=MATCH).

Please let me know if there are possibilities.

 

 

0 REPLIES 0