Rolling Over Log Subscriptions

When AsyncOS rolls over a log file, it:

  • Creates a new log file with the timestamp of the rollover and designates the file as current with the letter “c” extension
  • Renames the current log file to have a letter “s” extension signifying saved
  • Transfers the newly saved log file to a remote host (if push-based)
  • Transfers any previously unsuccessful log files from the same subscription (if push-based)
  • Deletes the oldest file in the log subscription if the total number of files to keep on hand has been exceeded (if poll-based)

What To Do Next