cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1027
Views
0
Helpful
3
Replies

Change the Host name which is being reported in the WSA logs

PaulTThomas
Level 1
Level 1

I have a WSA setup with 3 interfaces set up:

 

P1, P2 and M1

 

Users browse to P1 successfully, however, I have noticed in the logs that the HOST: is M1, rather than P1.

 

Is there any way to change this.

 

Thanks in advance.

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

Can you post example Logs to Look ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi Balaji,

 

When I do a web tracking report, here is a snippet of what I see

 

URL CATEGORY: bypass stuff
DESTINATION IP: 189.172.201.181 HOST: proxy1 (10.10.1.1)

 

It is configured as follows:

 

M1: 10.10.1.1

P1: 10.10.1.2

P2: 172.12.1.1

 

users browse to 10.10.1.2:8080 so I would expect this IP to be logged onto the logs

balaji.bandi
Hall of Fame
Hall of Fame

i would like to see the Logs generated by WSA - can you able to post that please.

 

go got comand level

> grep

>1

 

browse and post the logs

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help