cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
362
Views
20
Helpful
6
Replies
Highlighted
Beginner

The maximum logging period of the Cisco ESA C395

How many days can Cisco ESA C395 keep the history log (90, 180 days,)?
In the log configuration we can manually rollover only by size.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Mentor

Re: The maximum logging period of the Cisco ESA C395

i believe i have mentioned depends on the environment :

 

here is some documentation for reference :

 

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

 

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118369-technote-esa-00.html

 

Another way if your policy of organization looking to more retention, you can offload to an external server for a longer period.

 

BB
*** Rate All Helpful Responses ***

View solution in original post

6 REPLIES 6
Highlighted
VIP Mentor

Re: The maximum logging period of the Cisco ESA C395

its all depends on enviroment, some time big environment fill the size of the logs in week, some may be months.

 

if you take example the log fils for month and role over, you have 10months Logs, so this required to analyse and make necessary changes.

 

BB
*** Rate All Helpful Responses ***
Highlighted
Beginner

Re: The maximum logging period of the Cisco ESA C395

Thank you for your answer.

I can see that processes but, this case require an official document and I need proof that ESA/CES can keep history log more than 180 days.

Highlighted
Cisco Employee

Re: The maximum logging period of the Cisco ESA C395

Hello,

 

As mentioned, there's really no answer for this as it's highly dependent on mail volume. Also, logs are going to be completely separate from the message tracking and reporting databases.

 

The short answer is that yes this may be possible depending on mail volume, retention settings, and disk usage, but there's, unfortunately, no official document.

 

Thanks!

-Dennis M.

 

Highlighted
Beginner

Re: The maximum logging period of the Cisco ESA C395

Thank you for the clarification.

Highlighted
VIP Mentor

Re: The maximum logging period of the Cisco ESA C395

i believe i have mentioned depends on the environment :

 

here is some documentation for reference :

 

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

 

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118369-technote-esa-00.html

 

Another way if your policy of organization looking to more retention, you can offload to an external server for a longer period.

 

BB
*** Rate All Helpful Responses ***

View solution in original post

Highlighted
Beginner

Re: The maximum logging period of the Cisco ESA C395

Thank you for such a detailed answer. I really appreciate it.