Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Log File Manager settings

The Log File Manager settings are used for configuring the rotation, deletion, and pushing of log files that are maintained by particular modules of an appliance.

Settings can be configured for log files in general and for some special types of log files, which are stored in the Errors Log, the Update Log, and the Audit Log.

Global Log File Settings

Settings for log files in general.

These settings include options for rotation and deletion of log files and for pushing them to another location.

Auto-Rotation

Settings for rotating log files automatically according to their size, the time of day, or a particular interval. 

Option Definition
Enable auto-rotation When selected, log files are rotated according to particular options.
Enable log file rotation if log file size exceeds When selected, log files are rotated according to their size (in MiB), as specified in the input field that is provided.
Enable scheduling of log file rotation

When selected, log files are rotated according to the time of day (in hours and minutes), as specified in the input field that is provided.

The 24-hours format is used here. For example, 1 p.m. is 13:00.

Enable scheduling interval-based log file rotation

When selected, log files are rotated according to a time interval, which is specified in the following input fields.

  • Rotation interval — Sets a number of hours for the length of a rotation interval.
  • Rotation interval minutes — Sets a number of minutes on a slider scale for the length of a rotation interval.
GZIP log files after rotation When selected, log files are packed in the GZIP format after rotation.

Auto-Deletion

Settings for deleting log files automatically according to their size and the last time of modification.

Option Definition
Enable auto-deletion When selected, log files are deleted according to the following options.
Enable log file deletion if number exceeds When selected, log files are deleted if their number exceeds the value specified in the input field that is provided.
Enable auto-deletion of unchanged files When selected, log files are deleted after the period of time (in days) specified in the input field that is provided.

Auto-Pushing

Settings for pushing rotated log files automatically to another location.

Option Definition
Enable auto-pushing When selected, rotated log files are pushed from the local database on an appliance to the server that is specified using the following options.
Destination

Specifies the network protocol, host name, and path of a server. If log files are pushed to a file, the file name and the path to the file are specified.

The available network protocols are FTP, HTTP, HTTPS, FTPS, SFTP, and SCP.

NOTE: You cannot configure the pushing of log files to Content Security Reporter (CSR) here. The File System Logging settings must be used for this.

A variable can be added to the path name to specify the pushing process more precisely.

For example, %h can be added for the host name of the appliance that log files are pushed from. The destination could then be specified as : ftp://myftp.com/%h

When the log files are pushed, the variable is replaced with the appropriate value, which is a host name in this example.

The variables that you can use here include:

  • %h — Host name of an appliance
  • %y — Current year (four digits)
  • %m — Current month (one or two digits)
  • %% — Used for specifying the % character (if it is to occur in a host name)
User name

Specifies the name of a user who is authorized to push log files to a server.

The variable %h can be specified for the user name. It is replaced by the host name of the current appliance at run time.

Password

Specifies a password for the user who is authorized to push log files to a server.

Clicking Set allows you to set a new password.

Enable pushing log files directly after rotation

When selected, pushing follows rotation immediately.

Otherwise, log files are rotated according to a time interval, which is specified in the following input fields.

  • Push interval — Sets a number of hours for the length of a push interval.
  • Push interval minutes — Sets a number of minutes on a slider scale for the length of a push interval.
Add identifier to pushed file name

When selected, identifying information is added to the name of a pushed log file.

You can select one of the following for adding as identifying information: IP address, MAC address, host name, or UUID.

Next-hop proxies

Provides lists of next-hop proxies that can be used for pushing log files.

Clicking Add or Edit allows you to add a next-hop proxy list or to edit a list.

Settings for the Errors Log

Specific settings for the Errors Log.

You can configure these settings if you want them to differ from the global log file settings.

Option Definition
Enable specific errors log settings

When selected, the settings configured in the following apply to the Errors Log.

Otherwise, the global log file settings apply.

Auto-Rotation, Auto-Deletion, Auto-Pushing These settings include the same options and are configured in the same way as the global log file settings.

Settings for the Update Log

Specific settings for the Update Log.

You can configure these settings if you want them to differ from the global log file settings.

Option Definition
Enable specific update log settings

When selected, the settings configured in the following apply to the Update Log.

Otherwise the global log file settings apply.

Auto-Rotation, Auto-Deletion, Auto-Pushing These settings include the same options and are configured in the same way as the global log file settings.

Settings for the Audit Log

Specific settings for the Audit Log.

You can configure these settings if you want them to differ from the global log file settings.

Option Definition
Enable specific audit log settings

When selected, the settings configured in the following apply to the Audit Log.

Otherwise, the global log file settings apply.

Auto-Rotation, Auto-Deletion, Auto-Pushing These settings include the same options and are configured in the same way as the global log file settings.

Advanced

Settings for auto-deletion of core and feedback files.

Option Definition
Enable auto-deletion of core files

When selected, core files are automatically deleted according to your settings.

You can specify a number, a time interval, and a volume to let core files that exist in excess of these values be automatically deleted.

Enable auto-deletion of
feedback files

When selected, feedback files are automatically deleted according to your settings.

You can specify a number and time interval to let feedback files that exist in excess of these values be automatically deleted.

Enable auto-deletion of files
created by the event Body.ToFile.

When selected, files created by the event Body.ToFile are automatically deleted according to your settings.

You can specify a number, a time interval, and a volume to let files that exist in excess of these values be automatically deleted.

  • Was this article helpful?