Whenever possible, we recommend you use the FTP Log Push feature for downloading and deleting log files. See Using FTP Push to Automatically Download and Delete Log Files.
If you need to manage your log files manually, we recommend that you establish a regular schedule and ensure that all those responsible for downloading and deleting log files know the following things:
You will want to develop specific procedures for your situation. The following sections contain general ideas for accomplishing these tasks.
The primary consideration is that log files must be downloaded and deleted before the logging disk space fills up.
Before you can download or delete a log file, you must know its exact name.
Appliance log filenames can be listed in the browser-based management tool in Monitoring > Cache Logs. They can also be listed from the command line, or through a Telnet session using the get command.
The appliance automatically generates log filenames as follows:
NOTE: The dash is not included after the letters double.
This naming convention accommodates up to 702 log files per day. If the rollover options are set so that all the possible filenames are used in one day, the log file with the ZZ letter identifier should not be closed manually until the start of the next day (unless the logging disk becomes full).
To list log files using FTP, you must know the path to the files. Use the following table to determine the paths to various log files.
You can most easily view log filenames in the browser-based management tool. To do so, click Monitoring > click Cache Logs > select a log format > select a service.
The Mini FTP Server in version 1.3 and later supports the CWD command for changing to the target log directories. All appliance versions let you use the LS command in connection with full paths to list log files.
For example, the following command lists transparent and forward proxy log files in common format:
ls log:etc/proxy/data/logs/forward/common/
For a complete list of log file directory paths, see Getting Log Filenames.
You can also see a list of log filenames from the command line. However, you cannot download files from the command line.
The following table presents some command line/Telnet examples.
You can download the files in the browser-based management tool as you view them. After you click Download, when the browser asks what you want to do with the file, save it to your designated log file storage location.
You can use FTP from the storage location to retrieve the files using the GET command. You must first obtain each filename using one of the options explained in Getting Log Filenames.
After you have the log filename, you can transfer it to your workstation. For example, to download a forward proxy common format log file, you would use the following command after starting an FTP session with the appliance:
get log:/etc/proxy/data/logs/forward/common/filename.log
The filename variable is the name of the log file you have previously obtained.
You can also use the MGET command, but be aware that this command also downloads active log files that are not complete.
The appliance doesn't currently support the FTP server PUT command.
After the log files have been downloaded and saved to another location, delete the files using one of the following options: