<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xml:lang="en" lang="en" xmlns="http://www.w3.org/1999/xhtml">
  <head runat="server">
    <!-- PageID 382 - published by RedDot 7.5 - 7.5.1.69 - 22111 -->
    <META name="PublicArticle" content="True" />
    <META http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <META name="keywords" />
    <META name="summary" />
    <META name="product" content="fp_web" />
    <META name="version" content="v85" />
    <META name="book" content="Content Gateway Manager Help, v8.5.x" />
    <title>Working With Log Files</title>
    <!--Loading the 2016 fonts.-->
    <script type="text/javascript" src="//fast.fonts.net/jsapi/c504d579-e135-4f75-8335-4906f6c6ce67.js"></script>
    <!--Library content styles.-->
    <link rel="StyleSheet" href="https://help.forcepoint.com/docs/ni/assets/css/help2016.css" type="text/css" media="all" />
    <!--2016 font support -->
    <link type="text/css" rel="stylesheet" href="//fast.fonts.net/cssapi/c504d579-e135-4f75-8335-4906f6c6ce67.css" />
  </head>
  <body>
    <!--googleoff: all-->
    <a href="https://www.forcepoint.com">
      <img class="logo" alt="Forcepoint logo" src="https://help.forcepoint.com/docs/ni/assets/logo1.png" />
    </a>
    <div class="extLinksContainer">
      <a class="extLinks" href="//support.forcepoint.com/documentation">Documentation</a> | <a class="extLinks" href="//support.forcepoint.com">Support</a></div>
    <!--
		<wsApp:UserAccess ID="useraccess1" runat="server" IsSecure="False" />
		-->
    <div class="spacer1"></div>
    <br />
    <!-- New Navigation DIV -->
    <div class="TL_nav" style="text-align: left;">
      <table cellspacing="0" class="toolBarTable" summary="">
        <!-- End New Navigation DIV -->
        <tr>
          <td>
            <!-- New Go To TOC -->
            <a href="toc.aspx"><img src="images/toc.png" alt="Go to the table of contents" border="0" /></a>
            <!-- End Go To TOC -->
          </td>
          <td>
            <!-- New Previous -->
            <a href="auth_mac_idevice.aspx"><img src="images/prev.png" alt="Go to the previous page" border="0" /></a>
            <!-- End New Previous -->
          </td>
          <td>
            <!-- New Next (Active) -->
            <a href="event.aspx"><img src="images/next.png" alt="Go to the next page" border="0" /></a>
            <!-- End New Next (Active) -->
          </td>
          <td>
            <!-- New PDF -->
            <a href="wcg_help.pdf"><img src="images/pdf.png" alt="View or print as PDF" border="0" /></a>
            <!-- End New PDF -->
          </td>
          <!--Start JR breadcrumbs -->
          <td width="20px"></td>
          <td>
            <div class="WebWorks_Breadcrumbs" style="text-align: left;">Working With Log Files</div>
          </td>
          <!--End JR breadcrumbs -->
        </tr>
      </table>
    </div>
    <!--googleon: all-->
    <div>
      <div class="TC-TitleChapter"><a name="766243">Working With Log Files</a></div>
      <div class="IN-TopicInfo"><a name="766244">Help | Content Gateway | v8.5.x</a></div>
      <table class="DropListTable" style="text-align: left" border="0" cellpadding="1" cellspacing="0" summary="">
        <caption></caption>
        <tr>
          <td style="padding-bottom: 3.5pt; padding-left: 6pt; padding-right: 6pt; padding-top: 4.5pt; vertical-align: top">
            <div class="DLC-ClosedDynamicList" onclick="WebWorks_ToggleDIV(WebWorksRootPath, &quot;wwdd766247&quot;);"><a name="766247">Related topics:</a><script type="text/javascript" language="JavaScript1.2">WebWorks_WriteArrow(WebWorksRootPath, "wwdd766247", false);</script></div>
            <script type="text/javascript" language="JavaScript1.2">WebWorks_WriteDIVOpen("wwdd766247", false);</script>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="event.aspx" title="Event log files" name="766251">Event log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="manage.aspx" title="Managing event log files" name="766255">Managing event log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="formats.aspx" title="Event log file formats" name="766259">Event log file formats</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="rolling.aspx" title="Rolling event log files" name="766263">Rolling event log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="split.aspx" title="Splitting event log files" name="766267">Splitting event log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="collate.aspx" title="Collating event log files" name="766271">Collating event log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="logstats.aspx" title="Viewing logging statistics" name="766275">Viewing logging statistics</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="logview.aspx" title="Viewing log files" name="766279">Viewing log files</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <div class="B1-Bullet1_outer" style="margin-left: 0pt">
              <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
                <tr style="vertical-align: baseline">
                  <td>
                    <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                      <img src="b1.png" alt="*" border="0" width="8" height="8" />
                    </div>
                  </td>
                  <td width="100%">
                    <div class="B1-Bullet1_inner"><span class="LEM-LinkEmphasis"><a href="log_samples.aspx" title="Example event log file entries" name="766284">Example event log file entries</a></span></div>
                  </td>
                </tr>
              </table>
            </div>
            <script type="text/javascript" language="JavaScript1.2">WebWorks_WriteDIVClose();</script>
          </td>
        </tr>
      </table>
      <div class="B-Body"><a name="652174">Content Gateway keeps 3 types of log files:</a></div>
      <div class="B1-Bullet1_outer" style="margin-left: 0pt">
        <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
          <tr style="vertical-align: baseline">
            <td>
              <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                <img src="b1.png" alt="*" border="0" width="8" height="8" />
              </div>
            </td>
            <td width="100%">
              <div class="B1-Bullet1_inner"><span class="EM-Emphasis"><a name="659920">System log files</a></span> record system information, which includes messages about the state of Content Gateway and any errors or warnings that it produces. This information might include a note that event log files were rolled, a warning that cluster communication timed out, or an error indicating that Content Gateway was restarted. (Content Gateway posts alarms for error conditions in the Content Gateway manager; see <span class="LEM-LinkEmphasis"><a href="alarms.aspx" title="Working with alarms">Working with alarms</a></span>, for details.)</div>
            </td>
          </tr>
        </table>
      </div>
      <div class="I-IndentedText"><a name="740802">All system information messages are logged with the system-wide logging facility </a><span class="B-Bold">syslog</span> under the daemon facility. The <span class="B-Bold">syslog.conf</span> configuration file (stored in the <span class="B-Bold">/etc</span> directory) specifies where these messages are logged. A typical location is<br /><span class="B-Bold">/var/log/messages</span>.</div>
      <div class="I-IndentedText"><a name="601841">The </a><span class="B-Bold">syslog</span> process works on a system-wide basis, so it is the single repository for messages from all Content Gateway processes, including <span class="B-Bold">content_gateway</span>, <span class="B-Bold">content_manager</span>, and <span class="B-Bold">content_cop</span>.</div>
      <div class="I-IndentedText"><a name="601849">Each log entry in the log contains information about the date and time the error was logged, the hostname of the proxy server that reported the error, and a description of the error or warning.</a></div>
      <div class="I-IndentedText"><a name="601852">See </a><span class="LEM-LinkEmphasis"><a href="error_msgs.aspx" title="Content Gateway Error Messages">Content Gateway Error Messages</a></span>, for a list of the system information messages that Content Gateway logs.</div>
      <div class="B1-Bullet1_outer" style="margin-left: 0pt">
        <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
          <tr style="vertical-align: baseline">
            <td>
              <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                <img src="b1.png" alt="*" border="0" width="8" height="8" />
              </div>
            </td>
            <td width="100%">
              <div class="B1-Bullet1_inner"><span class="EM-Emphasis"><a name="601854">Error log files</a></span> record information about why a transaction was in error.</div>
            </td>
          </tr>
        </table>
      </div>
      <div class="B1-Bullet1_outer" style="margin-left: 0pt">
        <table border="0" cellspacing="0" cellpadding="0" summary="" role="presentation">
          <tr style="vertical-align: baseline">
            <td>
              <div class="B1-Bullet1_inner" style="width: 18pt; white-space: nowrap">
                <img src="b1.png" alt="*" border="0" width="8" height="8" />
              </div>
            </td>
            <td width="100%">
              <div class="B1-Bullet1_inner"><span class="EM-Emphasis"><a name="639025">Event log files</a></span> (also called <span class="EM-Emphasis">access log files</span>) record information about the state of each transaction that Content Gateway processes.</div>
            </td>
          </tr>
        </table>
      </div>
      <div class="B-Body"><a name="770013">Content Gateway creates both error and event log files and records system information in system log files. You can disable event logging and/or error logging. It is recommended that you log errors only or disable logging during peak usage hours.</a></div>
      <div class="B-Body"><a name="773560">On the </a><span class="B-Bold">Configure&nbsp;&gt; Subsystems&nbsp;&gt; Logging</span> tab, select one of the following options: <span class="B-Bold">Log Transactions and Errors</span>, <span class="B-Bold">Log Transactions Only</span>, <span class="B-Bold">Log Errors Only</span>, or <span class="B-Bold">Disabled</span>.</div>
    </div>
    <!--googleoff: all-->
    <div class="library_search">
      <form class="support_search" action="/content/kb-search.aspx" method="get">
        <label></label>
        <label></label>
        <input type="text" name="q" value=" Search eSupport" onfocus="if (this.value == ' Search eSupport') {this.value = '';}" onblur="if (this.value == '') {this.value = ' Search eSupport';}"></input>
        <input type="submit" value=" "></input>
      </form>
    </div>
    <br class="clear" />
    <!-- New Navigation DIV -->
    <div class="TL_nav" style="text-align: left;">
      <table cellspacing="0" class="toolBarTable" summary="">
        <!-- End New Navigation DIV -->
        <tr>
          <td>
            <!-- New Go To TOC -->
            <a href="toc.aspx"><img src="images/toc.png" alt="Go to the table of contents" border="0" /></a>
            <!-- End Go To TOC -->
          </td>
          <td>
            <!-- New Previous -->
            <a href="auth_mac_idevice.aspx"><img src="images/prev.png" alt="Go to the previous page" border="0" /></a>
            <!-- End New Previous -->
          </td>
          <td>
            <!-- New Next (Active) -->
            <a href="event.aspx"><img src="images/next.png" alt="Go to the next page" border="0" /></a>
            <!-- End New Next (Active) -->
          </td>
          <td>
            <!-- New PDF -->
            <a href="wcg_help.pdf"><img src="images/pdf.png" alt="View or print as PDF" border="0" /></a>
            <!-- End New PDF -->
          </td>
          <!--Start JR breadcrumbs -->
          <td width="20px"></td>
          <td>
            <div class="WebWorks_Breadcrumbs" style="text-align: left;">Working With Log Files</div>
          </td>
          <!--End JR breadcrumbs -->
        </tr>
      </table>
    </div>
    <div class="extFooterContainer">
      <div class="extFooter">
        <div align="center">Copyright 2023 Forcepoint. All rights reserved.</div>
      </div>
    </div>
    <SCRIPT>
   function getFileName() {
      //this gets the full url
      var url = document.location.href;
      //this removes the anchor at the end, if there is one
      url = url.substring(0, (url.indexOf("#") == -1) ? url.length : url.indexOf("#"));
      //this removes the query after the file name, if there is one
      url = url.substring(0, (url.indexOf("?") == -1) ? url.length : url.indexOf("?"));
      //this removes everything before the last slash in the path
      url = url.substring(url.lastIndexOf("/") + 1, url.length);
      //return
      return url;
   }

   var url = document.URL;
   var Docname = getFileName()
   s.pageName = "enu:support:technical library:v85xwcg_help:" + Docname;
   s.prop1 = "enu:support";
   s.prop2 = "enu:support:technical library";
   s.channel = "support";
   // <!--
   s.server = "<%= System.Environment.MachineName %>";
   //--></SCRIPT>
    <script language="javascript1.1" type="text/javascript">
   /********Do Not alter below this line ***********/
   var s_code = s.t(); if (s_code) document.write(s_code)
   //--&gt;</script>
  </body>
  <!--"GENERALQUARTERSALLHANDSMANYOURSTATIONS"-->
</html>