View access logs on the Edge SWG/ProxySG

Products

• ProxySG Software - SGOS

Issue/Introduction

There are multiple ways to view User Activity requests made through Edge SWG. One of them is by viewing Access log. It keeps/shows records of all flows going through Edge SWG.

Resolution

1. To view the current requests being made through the Edge SWG, within the management console navigate to Reports->Access Logging, choose the access log you want to view from the dropdown menu and click Show Log Tail to output the access log to this live window. Depending on the traffic volume, this might appear to flow too fast to read (in such cases you my want to change the 'Log Tail Refresh Interval', change it to 'none' if you do not want the page to refresh by itself and you can refresh the browser to refresh manually).
2. To View Access Logs which remain locally available on the Edge SWG (ProxySG) to download within the upload period, you can navigate to this advanced URL: https://<Edge_SWG_IP>:8082/Accesslog/directory
3. For longer-term reporting, the Edge SWG (ProxySG) appliance can be configured to upload access log data to several types of log processing services. Broadcom Reporter is uniquely tasked as the best method to analyze and report on user activity. See the following article for additional details:  Configure access logging on ProxySG or ASG to an FTP server, then to Reporter