IronPort - daily management guide - AsyncOS 7.6.1

Chapter 5 Logging
Logs Enabled by Default
Log Types
OL-25138-01
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Log Types
Your Cisco IronPort appliance is pre-configured with the following log subscriptions enabled by default
(other logs may be configured depending on which license keys you have applied). By default, the
retrieval method is “Manually Download.”
Table 5-4 Pre-configured Log Subscriptions
Log # Log Subscription Name Log Type
1 antispam Anti-Spam logs
2 antivirus Anti-Virus Logs
3 asarchive Anti-Spam Archive
4 authentication Authentication Logs
5 avarchive Anti-Virus Archive
6 bounces Bounce Logs
7 cli_logs CLI Audit Logs
8 encryption Encryption
9 error_logs IronPort Text Mail Logs
10 euq_logs IronPort Spam Quarantine Logs
11 euqgui_logs IronPort Spam Quarantine GUI Logs
12 ftpd_logs FTP Server Logs
13 gui_logs HTTP Logs
14 mail_logs IronPort Text Mail Logs
15 reportd_logs Reporting Logs
16 reportingqueryd_logs Reporting Query Logs
17 scanning Scanning Logs
18 slbld_logs Safe/Block Lists Logs
19 sntpd_logs NTP logs
20 status Status Logs
21 system_logs System Logs
22 trackerd_logs Tracking Logs
23 updater_logs Updater Logs
All pre-configured log subscriptions have a Log Level of 3, except for error_logs which is set at 1 so
that it will contain only errors. See Log Levels, page 5-39 for more information. For information about
creating new log subscriptions, or modifying existing ones, see Log Subscriptions, page 5-38.
This section covers the following topics:
Using IronPort Text Mail Logs, page 5-8
Using IronPort Delivery Logs, page 5-15
5-7