Change the log retention

By default, all web policies have the logging setting that you define at the account level. If you want to change the log retention for a particular policy:

Steps

  1. On the main toolbar, click Web, then select Policies (under Policy Management).
  2. On the Policies page, click the name of the policy you want to configure.
  3. On the General tab for the selected policy, click Edit.
  4. Under Full Traffic Logging, change the selection in the drop-down list from Use policy-wide default to either Enabled or Disabled. This overrides the account- level setting.
  5. Click Submit.

Next steps

You can view the logs available for your account by going to https://sync-web.mailcontrol.com/hosted/logs and logging on with the user name and password that you set up with the Log Export permission. If you access this site immediately after you have set up full traffic logging, you will see only an empty XML script, but once Forcepoint Web Security Cloud has started to retain your logs, the page will show all available log files for download.

Each file name has the following format:

hosted_<SourceID>_<AccountID>_<ClusterIP>_<Version>_<Epoch>_<SequenceNo>.gz