cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
332
Views
0
Helpful
9
Replies

Log Subscription

I am trying to pull log files from my SMA. I am logged in with the admin account and when I https://SMA_Name/system_administration/log_list?log_type=system_logs I get the message "Access Denied. You do not have the necessary privileges to view or edit this page. How can I get privilege to to pull this log? 

9 Replies 9

balaji.bandi
Hall of Fame
Hall of Fame

what version of SMA, can you post the screenshot to have log:

just for reference log subscription ;

https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma12-7/user_guide/b_SMA_Admin_Guide_12_7/b_NGSMA_Admin_Guide_chapter_01100.html

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

AsyncOS 15.5.1

can you post the screenshot of the issue you mentioned in the post.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

davisdolstateflus_0-1728658135488.png

davisdolstateflus_1-1728658760479.png

 

the pointer is for configuraiton of logs

But you need FTP client to browse, suggest to enable FTP and use WINSCP to connect or any FTP client.

You can only views logs what i tried was http.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thanks for your suggestion, however I don't seem to have the option to enable FTP services on the Security Management Appliance for our Cisco Cloud Email Security service(CES).

yes you can enable FTD and WSA and get the logs you looking to download locally.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

You can use SCP (ex. WinSCP)... (assuming you have CLI access enabled already)
Or open a TAC case and see if they'll open it for you... They tend to push you to use SCP instead as its more secure than FTP.

2 things.. for logs that you are sending via SYSLOG, you need to set up a second log subscription for FTP access if you want to get it that way too. 

And as Balaji mentioned, its FTP, not HTTP/HTTPS...   use the same username/password you login to the SMA with.