I got it..thanks for the KB.
How do I automate log transfers from the IronPort C-series or S-series appliance?
Answer
Many different types of logs are created on the IronPort Appliance. You may wish to have the appliance automatically transfer certain logs to another server.
This setup can be done via the GUI or CLI using the FTP or SCP protocols. Please read specifics below:
GUI (System Administration -> Log Subscriptions)
1. Click on the log name of the log you wish to modify under the 'Log Name' Field
2. Under 'Retrieval Method', you may select 'FTP on Remote Server' or 'SCP on Remote server'
You will need to enter the correct values in the appropriate scenario you choose. If you are not familiar with the correct values, please contact your systems / network administrator as they can help you determine which servers are available in your network.
CLI (Command Line Interface)
See the following CLI sequence:
S-Series> logconfig
[]> edit
[]>
Please enter the name for the log:
[Log_name]>
Log level:
1. Critical
2. Warning
3. Information
4. Debug
5. Trace
[3]>
Choose the method to retrieve the logs.
1. FTP Poll
2. FTP Push
3. SCP Push
Choose the method that you desire to setup. From this point the CLI will walk you through the same connection settings available in the GUI.
These are as follows:
FTP
Maximum Time Interval Between Transferring: 3600 seconds
FTP Host: Host name / IP address of the FTP server
Directory: Remote directory on FTP server (relative to the FTP logon. Typically '/')
Username: FTP username
Password: FTP password
