Log format of message audit logs for remote syslog

book

Article ID: 179466

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Log format of message audit logs for remote syslog on Messaging Gateway.

Resolution

Log format of message audit logs for remote syslog

You can configure Symantec Brightmail Gateway to send message audit log data to a remote syslog. All log messages sent to a remote syslog have the same prefix text.

See Standard prefix for Scanner logs sent to remote syslog.

The message audit log messages sent to the remote syslog take the following form:

Standard prefix

Date and time

Scanner host name

Process:

Message

Date, time, facility, log level, and IP address

Jan 15 15:42

scanner1

ecelerity:

1230876822|​0ad9200d-​b7b61ae00000​5b81-00-495db08c9df2|​DELIVER|10.217.32.13|​[email protected]

See Standard prefix for Scanner logs sent to remote syslog.

Date in the format month date. Time in the format hour:minute. The time is in 24-hour clock notation.

This is the date and time that the log message was recorded on the Scanner.

Name of the Scanner on which the log message was created.

Name of the process that generated the log message.

Log message.

See Format of Audit logs

 

The following is a log message for one event as it would appear on the remote syslog.

01-15-2009	11:44:53	Local3.Info	10.217.32.13	Jan  15 15:42:42

scanner1 ecelerity: 1230876822|0ad9200d-b7b61ae000005b81-00-

495db08c9df2|DELIVER|10.217.32.13|[email protected]