SpanVA log size limit
search cancel

SpanVA log size limit

book

Article ID: 172757

calendar_today

Updated On:

Products

CASB Security Standard CASB Security Premium CASB Security Advanced CASB Audit CASB Gateway CASB Gateway Advanced

Issue/Introduction

Device logs are not processing.  The latest date is not updated.

The data source in question may have a green dot indicator and seemingly indicate logs were processed successfully; however, the datasource is missing the Latest or Earliest Date. 

Check for large proxy logs uploaded to CloudSOC.  

 

Cause

SpanVA cannot process logs that are too large. 

Resolution

CloudSOC Audit has a limit of 8GB for processing any uploaded log. If a log is uploaded that exceeds the 8GB limit, there is no error message that is generated.

Best Practice, split the large log into smaller pieces, compress, and process the smaller log files. Broadcom recommends logs not exceed 3GB (compressed) in size for optimal processing.

Attachments

SpanVA process of logs Olin.PNG get_app