Modify message tracking log size

Unanswered Question
Aug 5th, 2012

Hi All,

I would like to ask if it is possible to change the buffer size for the message tracking log so we could keep more historical message logging. Thanks.

Product: C170

Version of Ironport: Async 7.5

Rgds,

Jacky









I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Bob Fayne Wed, 08/08/2012 - 07:27

I don't believe that there is any way to increase the size of the message tracking database. The default is going to be the largest possible based on the amount of drive space in the appliance. Here's a couple of things that may help.

1) Turn off rejected connection handling to save space for actual messages

     From the menu: Security Services -> Message Tracking -> Edit Settings

2) Upgrade your appliance ($$)

    The C170 has 500GB of total drive space. Larger appliances have up to 1.8TB

3) Add an M-Series appliance. Not cheap either but would likely give you the most space (up to 3.6TB)

    http://ironport.com/pdf/ironport_m-series_datasheet.pdf

Andreas Mueller Thu, 08/16/2012 - 05:21

Hello Jacky,

in addition to the suggestions Bob made already, if you just have to keep logging data for legal reasons, the recommented solution would be to push the mail logs to another server (syslog, ftp push), and keep them there for as long as you want. They contain all the information that message tracking provides, the acess is different (grep, findevent), but still you'll be able to look up messages or connections later.

Hope that helps,

Andreas

Actions

Login or Register to take actions

This Discussion

Posted August 5, 2012 at 9:11 PM
Stats:
Replies:2 Overall Rating:
Views:1318 Votes:0
Shares:0

Related Content

 

Discussions Leaderboard

Rank Username Points
1
Ken Stieers
263
2
David Miller
83
3
Paul Cardelli
65
4
Jernej Vodopivec
55
5
dlnash018
48
Rank Username Points
Bob Fayne
15
Ken Stieers
10
Karsten Iwen
5
Paul Cardelli
5
pcoughlin01
5