Delete access logs on Edge-SWG (formerly ProxySG)

Products

• ProxySG Software - SGOS

Issue/Introduction

You can delete Access Logs from the CLI. This KB article shows how to view and delete access logs.

Resolution

To see what log facilities are enabled you can do a "view log" from the CLI then enter 'enable' mode followed by 'conf t':

Blue Coat SG>enable
Blue Coat SG#configure terminal

Enter the access logging section:

Blue Coat SG#(config)access-log

then view log:

Blue Coat SG#(config access-log)view log
Settings:
Log name: main
Format name: bcreportermain_v1
Description: Use for protocols having no specific default log
  Log uploading is disabled
  Logs upload as gzip file
  Wait 60 seconds between server connection attempts
  Log encryption disabled
  Log signing disabled
  FTP client:
    Filename format: SG_%f_%c_%l%m%d%H%M%S.log
    Filename uses utc time
    Use PASV: yes
    Use secure connections: no
  Primary host site:
    Host:
    Port: 21
    Path:
    Username:
    Password: ************
  Alternate host site:
    Host:
    Port: 21
    Path:
    Username:
    Password: ************
  HTTP client:
    Filename format: SG_%f_%c_%l%m%d%H%M%S.log
    Filename uses utc time
    Use secure connections: no
  Primary host site:
    Host:
    Port: 80
    Path:
    Username:
    Password: ************
  Alternate host site:
    Host:
    Port: 80
    Path:
    Username:
    Password: ************
  Custom client:
    Primary server:  :69
    Alternate server:  :69
    Use secure connections: no
  Bluecoat Reporter client:
    Primary server:  :9081
    Alternate server:  :9081
  Websense client:
    Primary server:  :55805
    Alternate server:  :55805
  Log uploading:
    Log is uploaded daily at 02:00
  No bandwidth class has been set for uploads
  A keep-alive log packet is sent every 300 seconds
  Start an early upload when log reaches 24161 megabytes
  Remote log file rotation by size is disabled

Note: Before deleting access logs ensure you have a backup of the logs:

Management Console > Statistics Tab > Advanced > Access Log > Show list of all logs > Click on log > Click on the log Object and save

To delete the logs, from the access-log configuration, select a log to delete. You can use the "?" to see available logs to delete:

Blue Coat SG#(config access-log)edit log ?
 <log-name>
Blue Coat SG#(config access-log)edit log main
Blue Coat SG#(config log main)commands delete
  ok

 

If your ProxySG is constantly uploading small files, or the ProxySG has large access logs that have not been uploaded, please see Access logs start unwanted early uploads or small log files are constantly uploading to understand why this is happening.  Simply deleting the access logs may stop the behavior, but the problem will return unless it is addressed.

To view the log facility that is currently configured on Proxy, you can use the "view log" command.
See below sample which is showing log "main":