Does is possible to retrive older logs from proxySG

[Mayur Rajaram Jadhav]

Hi All,

 

Middle of troubleshootig, On 28th we get it to know that from 11 Sept, 2018 ProxySG stopped to report logs to reporter. We checked FTP server settings port configured was 22, so i changed the port to 21 and tested the upload that worked, So we throught to wait for periodic update which is sheduled every day 2:00 am.

Proxy didnt reported logs in periodic shedule, But it reported logs on 9:11 am 1st oct, 2018. Why this abnormal behavior?

Then we get it know that the log size massage "Stoppepd- Log Full", in below article it is telling to resume you need to delete access logs from command line. But before delete i want to download this logs, because it is most important. i tried rotate logs option given in below option that also not worked.

To download logs next option is restart, but before that i want to know below query answer

1)Does it possible to retrive logs from 11 Sept to till date? As i cant see all the file in access logs, if these logs are not there why it is showing Log full.

2)Why it was stopped, what is the porxy normal behavior against saving logs in Access logs?

3)Why proxy reported logs to reporter on 1st Oct, 2018 morning, that was not sheduled time?

 

https://support.symantec.com/en_US/article.TECH240815.html

https://support.symantec.com/en_US/article.TECH242408.html

Thanks,

Mayur

[Migration User]

Hi Mayur,

                      ProxySG uploads logs based on your upload settings. If the log gets filled to a level (due to huge logging within a day or previous upload failure or due to some other logs taking more space), proxy will start early upload. This could be the reason why you are noticed an upload on an odd hour.

    First confirm why the proxy is complaining about the log size to be high. If you can share the output of https://x.x.x.x:8082/Accesslog/all_Statistics, I will check and let you know whether any file is eating up the space. If this is the case, you can delete that one and save your main log file. If possible, can you share the full sysinfo as a PM to me.