Web Gateway 7.1.5 Product Guide - McAfee

8
Monitoring
Logging
Create a log handler
When you create new logging rules, you can insert them into existing logging rule sets or create new
rule sets for them. These must be nested themselves in top-level rule sets known as log handlers. This
section tells you how to create a log handler.
Note: You can also use the Default log handler for inserting new logging rule sets.
Complete the following procedure to do this:
1 Go to Policy | Rule Sets.
2 From the Rule Sets menu, select Log Handler.
3 On the log handler tree, navigate to the position where you want to insert the new log handler. Then
click Add.
4 From the drop-down menu that appears, select Log Handler. The Add New Log Handler window
opens with the Rule Sets tab selected.
5 Configure the following general settings:
• Name — Name of the log handler
• Enable — When selected, the log handler is enabled.
• [Optional] Comment — Plain-text comment on the log handler.
6 [Optional] Click the Permissions tab and configure who is allowed to access the new log handler.
7 Click OK to close the Add New Log Handler window. The log handler is inserted into the tree structure.
8 Click Save Changes.
You can now insert one or more nested rule sets into the log handler and fill these with rules.
For more information, see Add a new rule set, Create a sample logging rule, and Access restrictions.
Use self-configured log files
You can use log files of your own to monitor appliance behavior and have entries written into them by
rules. This section explains how this is done.
Complete the following procedure to enable the use of your own log files:
1 Go to Policy | Rule Sets.
2 Use the items on this tab to create a log handler and a nested rule set within this log handler.
3 Create a log for storing log files:
a Go to Policy | Settings.
b Go to File System Logging and select one of the existing settings, for example, Access Log
Configuration. These will serve as the starting point for creating new setting, including settings
for a new log.
c Click Add above the Settings tree. The Add Settings window opens.
d In the Name field, enter a name for the new settings.
e [Optional] Type a comment on the new settings and use the Permission tab to configure who is
allowed access to the new settings.
f Under Name of the log, type the name of the new log.
g Configure other items of the new settings as needed.
h Click OK. The Add Settings window closes and the new settings appear under File System
Logging on the Settings tree.
282 McAfee Web Gateway 7.1.5 Product Guide