Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Log Files > Event log files
Event log files
Help | Content Gateway | Version 7.8.x
Event log files record information about every request that Websense Content Gateway processes. By analyzing the log files, you can determine how many people use the proxy, how much information each person requested, what pages are most popular, and so on.
Content Gateway supports several standard log file formats, such as Squid and Netscape, and user-defined custom formats. You can analyze the standard format log files with off-the-shelf analysis packages. To help with log file analysis, you can separate log files so that they contain information specific to protocol or hosts. You can also configure Content Gateway to roll log files automatically at specific intervals during the day.
The following sections describe how to:
*
Manage your event log files
You can choose a central location for storing log files, set how much disk space to use for log files, and set how and when to roll log files. See Managing event log files.
*
Choose different event log file formats
You can choose which standard log file formats you want to use for traffic analysis (for example, Squid or Netscape). Alternatively, you can use the Content Gateway custom format, which is XML-based and enables you to institute more control over the type of information recorded in log files. See Event log file formats.
*
Roll event log files automatically
You can configure Content Gateway to roll event log files at specific intervals during the day so that you can identify and manipulate log files that are no longer active. See Rolling event log files.
*
Separate log files according to hosts
You can configure the proxy to create separate log files for different protocols based on the host. See Splitting event log files.
*
Collate log files from different nodes
You can designate one or more nodes on the network to serve as log collation servers. These servers, which might either be stand-alone or part of Content Gateway, enable you to keep all logged information in well-defined locations. See Collating event log files.
*
View statistics about the logging system
Content Gateway provides statistics about the logging system. You can access the statistics through the Content Gateway manager or through the command line interface. See Viewing logging statistics.
*
View log files
You can view the system, event, and error log files that Content Gateway creates. You can view an entire log file, a specified last number of lines in the log file, or all lines that contain a specified string.
*
Interpret log file entries for the standard log file formats. See Example event log file entries.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working With Log Files > Event log files
Copyright 2016 Forcepoint LLC. All rights reserved.