ESA Syslog

[fatalXerror]

hi guys,

just want to ask if an ESA push the mail_logs to an external syslog server does the ESA will not produce a log file in its disk?

thanks

[Raed Boshmaf]

Hi 

Regarding your question the logs will be send to the syslog server. if you want to keep a copy of these logs on your appliance then just create another copy of these logs with an open of manual download.

so for example create to two mail_logs of type IronPort Text Mail Logs mail_logs_local with a manual download option "local logging on the machine" and mail_logs_syslog with syslog configured on it "external logging".

Regards

Raed

[dmccabej]

Hello,

For best practice we recommend not to touch the built-in log subscriptions on the appliance, as these are extremely useful (and necessary) for troubleshooting. 

If you are wanting to send logs via syslog, then the best way would be to add a new log subscription using a new name (IE: mail_logs_syslog), select IronPort Text Mail Logs as the type and then enter in the syslog server information. Also, I would keep the log level at Information as it's known to cause performance issues if raised higher.

Creating a Log Subscription in the GUI

Thanks!

-Dennis M.