Product Support: Secure Email | Secure Manager | Encryption Talos: Reputation Lookup | Email Status Portal | Web & Email Reputation Cisco: Open a Support Case | Support & Downloads | Worldwide Contacts | Bug Search | Notification Service | Secure Email Guided Setup |
ESA: | 13.7.0-093 |
SMA: | 13.8.1-052 | |
Reporting Plug-in: | 1.1.0.136 | |
Encryption Plug-in: | 1.2.1.167 |
hi guys,
just want to ask if an ESA push the mail_logs to an external syslog server does the ESA will not produce a log file in its disk?
thanks
Hi
Regarding your question the logs will be send to the syslog server. if you want to keep a copy of these logs on your appliance then just create another copy of these logs with an open of manual download.
so for example create to two mail_logs of type IronPort Text Mail Logs mail_logs_local with a manual download option "local logging on the machine" and mail_logs_syslog with syslog configured on it "external logging".
Regards
Raed
Hello,
For best practice we recommend not to touch the built-in log subscriptions on the appliance, as these are extremely useful (and necessary) for troubleshooting.
If you are wanting to send logs via syslog, then the best way would be to add a new log subscription using a new name (IE: mail_logs_syslog), select IronPort Text Mail Logs as the type and then enter in the syslog server information. Also, I would keep the log level at Information as it's known to cause performance issues if raised higher.
Creating a Log Subscription in the GUI
Thanks!
-Dennis M.