message tracking log - time period

[Juraj Ban]

Hi,

How long are message tracking logs keeped on appliance?

How can i control message tracking logs.

Lots of HDD space available and I want 3 months of available Message Tracking logs.

When are Message traking logs deleted from the appliance?

[Robert Sherwin]

Message tracking is based on the drive space available on the ESA appliance.

It is not possible to configure the # of days for retention of message tracking data. The set HDD storage allocation for message tracking data is limited. HDD storage allocation is set based on the hardware:

C1X0: 10G

C3X0: 20G

C6X0: 50G

X10X0: 50G

Your best solution in order to store mail logs/message tracking - would be to also have configured to store the mail_logs off to a syslog server --- that way you can determine the full extent/length of the retention period.  (And also allows you to search/manipulate all mail_logs with a little easier access that may be available on the ESA.)

Hope that helps!

-Robert

[Juraj Ban]

Do I understand it right. then situation is like this:

Message Tracking displays messages from mail_logs based on subscription properties.

Still new files with mail_logs are created untill HDD space is available based on appliance but Message Tracking does not process them.

If we change option from 10 to 20 in MaxFiles then MessageTracking will search 20 mail_log files. So basicy appliance does not delete logs if there is available storage space.

[Robert Sherwin · Accepted solution]

No.  Message tracking is not tied directly to the mail_logs.  The same data is used to write into the message tracking DB - but, changing the file retention option, and increasing the mail_logs created and kept, does not impact the message tracking DB retention time frame. 

Increasing the mail_logs from 10 to 20 will only force the ESA to retain 20 mail_logs, based on the size and roll-over for mail_logs only.

On the ESA - this is set, and not configurable.  So - once the data is written to the message tracking DB, it is written.  The ESA does not allow this DB or disk allocation to be changed, currently.

-Robert

[ravi saini]

ESA storage capacity is limited.

so I would suggest to go for Cisco SMA devices because they have more capacity to store massages.

[Juraj Ban]

SMA at the time is not the option. Maybe in feature.