The maximum logging period of the Cisco ESA C395

[ATHILLEUS]

How many days can Cisco ESA C395 keep the history log (90, 180 days,)?
In the log configuration we can manually rollover only by size.

[balaji.bandi]

its all depends on enviroment, some time big environment fill the size of the logs in week, some may be months.

if you take example the log fils for month and role over, you have 10months Logs, so this required to analyse and make necessary changes.

[ATHILLEUS]

Thank you for your answer.

I can see that processes but, this case require an official document and I need proof that ESA/CES can keep history log more than 180 days.

[dmccabej]

Hello,

As mentioned, there's really no answer for this as it's highly dependent on mail volume. Also, logs are going to be completely separate from the message tracking and reporting databases.

The short answer is that yes this may be possible depending on mail volume, retention settings, and disk usage, but there's, unfortunately, no official document.

Thanks!

-Dennis M.

[ATHILLEUS]

Thank you for the clarification.

[balaji.bandi · Accepted solution]

i believe i have mentioned depends on the environment :

here is some documentation for reference :

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118369-technote-esa-00.html

Another way if your policy of organization looking to more retention, you can offload to an external server for a longer period.

[ATHILLEUS]

Thank you for such a detailed answer. I really appreciate it.