Good day. We currently use the IronPort S670.  In the the Log Subscription, section, we are trying to get a custom Log Subscription that uses the Access Logs. Bellow is I have inputed in the Custum Fields area of the Log Subscription: Date %v|Time %V|Unix_TimeStamp %t|Client_IP %a|Client_Source_Port %F|Destination_Port %p|Source_IP %k|Source_Hostname %d|Source_CPU_Name %N|Request_URI %U|Full_URL %Y|Cookie_Header %C|Referrer %<Referrer:|Forwarded_for %f|Elapsed_Time %e|Bytes %B|Request_Size %q|MYEND|                    I do get all the fields and the format I requested in my log files, however, my issue is that is adds the default logs to it it as well.  Sample of log file output: In bold, the custom fields I requested, the rest before, is the default log output. 1335539582.805 359 10.159.56.158 TCP_CLIENT_REFRESH_MISS/200 6699 POST http://ca.mg5.mail.yahoo.com- DIRECT/ca.mg5.mail.yahoo.com text/plain DEFAULT_CASE_11-PHAC_Access-PHAC_Access-NONE-NONE-NONE-DefaultGroup <IW_mail,-,"1","-",-,-,-,"1","-",-,-,-,"-","1",-,"-","-",-,-,IW_mail,-,"-","-","Yahoo Mail","Webmail","Unknown","-",149.28,0,-,"-","-"> - Date 2012-04-27|Time 15:13:02|Unix_TimeStamp 1335539582.805|Client_IP 10.159.56.158|Client_Source_Port 4934|Destination_Port 80|Source_IP 98.136.145.154|Source_Hostname ca.mg5.mail.yahoo.com|Source_CPU_Name ca.mg5.mail.yahoo.com|Request_URI ws/mail/v2.0/js?|Full_URL http://ca.mg5.mail.yahoo.com/ "Cookie: B=0nlkn2p7dairm&b=4&d="|Referrer -|Forwarded_for -|Elapsed_Time 359|Bytes 8756|Request_Size 2057|MYEND| Is there a way to have the custom log subscriptions, to only show the custom fields selected? Thank you for all your assistance. Cheers ... View more