How to check IronPort (ESA) email logs very effectively

[pbabu6001]

Hi,

I am working on Cisco C670 appliance and I would like to check email logs on how many connections (or) from which domains (or) from which IP's taking from outside email servers/domains. Thank you.

[Libin Varghese · Accepted solution]

Hi,

The best method to track this is by using the reports available under the Monitor tab through the GUI.

For instance Monitor -> Incoming Mail -> IP Address/Domain.

To reivew the mail logs, download the Mail Logs from the appliance via FTP to your local computer (on the GUI, to go System Administration -> Log Subscriptions -> IronPort (Text) Mail Logs) and then earch in the log files with your preferred text file editor. 

Thanks

Libin Varghese

[pbabu6001]

Thank you Libin for your 2 valuable suggestions.