Configuring Log Subscriptions
Log subscriptions create the individual log files that are stored on a Cisco Content Security appliance or remotely. A log subscription is either pushed (delivered to another computer) or polled (retrieved from the appliance). Generally, log subscriptions have the following attributes:
|
Attribute |
Description |
|---|---|
|
Log Type |
Defines the type of information recorded and the format of the log subscription. For more information, see Summary of Log Types. |
|
Name |
Descriptive name of log subscription that you provide for your future reference. |
|
Log Filename |
Physical name of the file when it is written to disk. If the system includes multiple content security appliances, use a unique log filename to identify the appliance that generated the log file. |
|
Rollover by File Size |
Maximum size that the file can reach before it rolls over. |
|
Rollover by Time |
When to roll over log files, based on time. See options at Log Rollover and Transfer Schedule. |
|
Rate Limit |
Sets the maximum number of logged events in the log file, within the specified time range (in seconds). The default time range value is 10 seconds. |
|
Log Level |
Level of detail for each log subscription. |
|
Retrieval Method |
Method used to transfer the log files from the appliance. |
Use the Management Appliance > System Administration > Log Subscriptions page (or the logconfig command in the CLI) to configure a log subscription. You are prompted for the log type, as shown in Summary of Log Types. For most log types, you are also asked to select a log level for the log subscription.
Note | Configuration history logs only: If you anticipate loading configurations from the configuration history logs, be aware that you cannot load configurations containing masked passphrases. On the Management Appliance > System Administration > Log Subscriptions page, select Yes when prompted whether you want to include passphrase in the log. If you are using the logconfig command in the CLI, type y when prompted. |