cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1966
Views
20
Helpful
6
Replies

The maximum logging period of the Cisco ESA C395

ATHILLEUS
Beginner
Beginner

How many days can Cisco ESA C395 keep the history log (90, 180 days,)?
In the log configuration we can manually rollover only by size.

1 Accepted Solution

Accepted Solutions

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

i believe i have mentioned depends on the environment :

 

here is some documentation for reference :

 

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

 

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118369-technote-esa-00.html

 

Another way if your policy of organization looking to more retention, you can offload to an external server for a longer period.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

6 Replies 6

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

its all depends on enviroment, some time big environment fill the size of the logs in week, some may be months.

 

if you take example the log fils for month and role over, you have 10months Logs, so this required to analyse and make necessary changes.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thank you for your answer.

I can see that processes but, this case require an official document and I need proof that ESA/CES can keep history log more than 180 days.

Hello,

 

As mentioned, there's really no answer for this as it's highly dependent on mail volume. Also, logs are going to be completely separate from the message tracking and reporting databases.

 

The short answer is that yes this may be possible depending on mail volume, retention settings, and disk usage, but there's, unfortunately, no official document.

 

Thanks!

-Dennis M.

 

Thank you for the clarification.

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

i believe i have mentioned depends on the environment :

 

here is some documentation for reference :

 

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

 

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118369-technote-esa-00.html

 

Another way if your policy of organization looking to more retention, you can offload to an external server for a longer period.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thank you for such a detailed answer. I really appreciate it.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: