This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Email Appliance Log

We have some data control policy configured in email appliance. Each time a policy triggers an email it sends an email to a designated email account and log the event in email appliance.

Is there any way I can download logs from Email appliance so I can put it in excel? I know Email appliance has a option to transfer logs to syslog server, but is there other option?

This thread was automatically locked due to age.

Parents

0 TomA over 13 years ago

Hi BopBop,
The only other option (besides syslog) would be to backup your 'System Logs' to FTP. The logs will be in the same format as when transferred via syslog. So a syslog server would usually be preferrable because log data is transferred in real time.
You could import this data into excel, use a reporting program, or manually search the data (eg. via script). More details on the format are here:
http://esa.sophos.com/docs/esa/sea_docs/en/ESA/references/SEASyslog.html
If you just want more information about the message that was quarantined, you could consider enhancing the notification instead. You can add variables to your notification to give more detail:
http://esa.sophos.com/docs/esa/sea_docs/en/ESA/concepts/PolAboutActionsTempVars.html
Does that help? Let me know if there was something specific you want from the logging.
Thanks,
Tom.
:25675
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 TomA over 13 years ago

Hi BopBop,
The only other option (besides syslog) would be to backup your 'System Logs' to FTP. The logs will be in the same format as when transferred via syslog. So a syslog server would usually be preferrable because log data is transferred in real time.
You could import this data into excel, use a reporting program, or manually search the data (eg. via script). More details on the format are here:
http://esa.sophos.com/docs/esa/sea_docs/en/ESA/references/SEASyslog.html
If you just want more information about the message that was quarantined, you could consider enhancing the notification instead. You can add variables to your notification to give more detail:
http://esa.sophos.com/docs/esa/sea_docs/en/ESA/concepts/PolAboutActionsTempVars.html
Does that help? Let me know if there was something specific you want from the logging.
Thanks,
Tom.
:25675
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data