cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9608
Views
10
Helpful
2
Replies

ESA Syslog

fatalXerror
Level 5
Level 5

hi guys,

just want to ask if an ESA push the mail_logs to an external syslog server does the ESA will not produce a log file in its disk?

thanks

2 Replies 2

Raed Boshmaf
Cisco Employee
Cisco Employee

Hi 

Regarding your question the logs will be send to the syslog server. if you want to keep a copy of these logs on your appliance then just create another copy of these logs with an open of manual download.

so for example create to two mail_logs of type IronPort Text Mail Logs mail_logs_local with a manual download option "local logging on the machine" and mail_logs_syslog with syslog configured on it "external logging".

Regards

Raed

dmccabej
Cisco Employee
Cisco Employee

Hello,

For best practice we recommend not to touch the built-in log subscriptions on the appliance, as these are extremely useful (and necessary) for troubleshooting. 

If you are wanting to send logs via syslog, then the best way would be to add a new log subscription using a new name (IE: mail_logs_syslog), select IronPort Text Mail Logs as the type and then enter in the syslog server information. Also, I would keep the log level at Information as it's known to cause performance issues if raised higher.

Creating a Log Subscription in the GUI

Thanks!

-Dennis M.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: