Delete access logs on Edge-SWG (formerly ProxySG)

Products

• ProxySG Software - SGOS

Issue/Introduction

You'll need to log into the CLI, go into enable mode and then conf t.

Blue Coat SG>enable
Enable Password:
Blue Coat SG#conf t
Enter configuration commands, one per line.  End with CTRL-Z.
Blue Coat SG#(config)
Blue Coat SG#(config)access-log
Blue Coat SG#(config access-log)
Blue Coat SG#(config access-log)edit log ?
 <log-name>
Blue Coat SG#(config access-log)edit log main
Blue Coat SG#(config log main)commands delete
  ok
Blue Coat SG#(config log main)

 

If your ProxySG is constantly uploading small files, or the ProxySG has large access logs that have not been uploaded, please see 000007708 to understand why this is happening.  Simply deleting the access logs may stop the behavior, but the problem will return unless it is addressed.

To view the log facility that is currently configured on Proxy, you can use the "view log" command.
See below sample which is showing log "main":

Blue Coat SG#(config access-log)view log
Settings:
Log name: main
Format name: bcreportermain_v1
Description: Use for protocols having no specific default log
  Log uploading is disabled
  Logs upload as gzip file
  Wait 60 seconds between server connection attempts
  Log encryption disabled
  Log signing disabled
  FTP client:
    Filename format: SG_%f_%c_%l%m%d%H%M%S.log
    Filename uses utc time
    Use PASV: yes
    Use secure connections: no
  Primary host site:
    Host:
    Port: 21
    Path:
    Username:
    Password: ************
  Alternate host site:
    Host:
    Port: 21
    Path:
    Username:
    Password: ************
  HTTP client:
    Filename format: SG_%f_%c_%l%m%d%H%M%S.log
    Filename uses utc time
    Use secure connections: no
  Primary host site:
    Host:
    Port: 80
    Path:
    Username:
    Password: ************
  Alternate host site:
    Host:
    Port: 80
    Path:
    Username:
    Password: ************
  Custom client:
    Primary server:  :69
    Alternate server:  :69
    Use secure connections: no
  Bluecoat Reporter client:
    Primary server:  :9081
    Alternate server:  :9081
  Websense client:
    Primary server:  :55805
    Alternate server:  :55805
  Log uploading:
    Log is uploaded daily at 02:00
  No bandwidth class has been set for uploads
  A keep-alive log packet is sent every 300 seconds
  Start an early upload when log reaches 24161 megabytes
  Remote log file rotation by size is disabled

Resolution

Note :- Before deleting access logs you need to make sure you have backup of logs. Below are the steps to backup access logs and screen shot of objects.

Management Console -> Statistics Tab -> Advanced -> Access Log -> Show list of all logs -> Click on log -> Click on log Object and save