Configure > Subsystems > Logging > General

Logging

Enables or disables event logging so that transactions are recorded into event log files and/or error log files.

Select Log Transactions and Errors to log transactions into your selected event log files and errors in the error log files.

Select Log Transactions Only to log transactions into your selected event log files only. Content Gateway does not log errors in the error log files.

Select Log Errors Only to log errors in the error log files only. Content Gateway does not log transactions into your selected event log files.

Select Disabled to turn off logging.
Log Directory Specifies the path of the directory in which Content Gateway stores event logs. The path of this directory must be the same on every node in the Content Gateway cluster failover group. The default is: /opt/WCG/logs
Log Space: Limit

Specifies the maximum amount of space (in megabytes) allocated to the logging directory for the log files.

When Content Gateway is on an appliance, the size is set to 5120 (5 GB) and cannot be changed.

When Content Gateway is installed on a stand-alone server, the default size is 20480 (20 GB) and the size is configurable.

Note: Transaction logs can consume a lot of space. Make sure that this limit is smaller than the actual space available on the partition that contains the logging directory.
Log Space: Headroom Specifies the tolerance for the log space limit. If the Auto-Delete Rolled Files option is enabled, autodeletion is triggered when the amount of free space available in the logging directory is less than the headroom.
Log Rolling: Enable/ Disable Enables or disables log file rolling. To keep log files down to manageable sizes, you can roll them at regular intervals. See Rolling event log files.
Log Rolling: Offset Hour Specifies the hour when log rolling takes place. You can set a time of the day in the range 0 to 23. For example, if the offset hour is 0 (midnight) and the roll interval is 6, the log files are rolled at 00:00, 06:00, noon, and 18:00.
Log Rolling: Interval Specifies the amount of time Content Gateway enters data in log files before rolling them to .old files. The minimum value is 300 seconds (five minutes). The default value is 21600 seconds (6 hours). The maximum value is 86400 (1 day).
Log Rolling: Auto- Delete Rolled Files Enables autodeletion of rolled log files when available space in the log directory is low. Autodeletion is triggered when the amount of free space available in the log directory is less than the Log Space Headroom.
Reverse DNS lookup for Threat Tracking

Enables or disables reverse DNS lookups to facilitate inclusion of the client host name in the Threats dashboard in the Web Security module of the Forcepoint Security Manager, and in logs and reports.

CAUTION:
To achieve the expected results and avoid unexpected network behaviors, before enabling this option be sure that reverse DNS is configured in your network.