cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2849
Views
0
Helpful
2
Replies

Modify message tracking log size

cksjackey
Level 1
Level 1

Hi All,

I would like to ask if it is possible to change the buffer size for the message tracking log so we could keep more historical message logging. Thanks.

Product: C170

Version of Ironport: Async 7.5

Rgds,

Jacky

2 Replies 2

Bob Fayne
Level 1
Level 1

I don't believe that there is any way to increase the size of the message tracking database. The default is going to be the largest possible based on the amount of drive space in the appliance. Here's a couple of things that may help.

1) Turn off rejected connection handling to save space for actual messages

     From the menu: Security Services -> Message Tracking -> Edit Settings

2) Upgrade your appliance ($$)

    The C170 has 500GB of total drive space. Larger appliances have up to 1.8TB

3) Add an M-Series appliance. Not cheap either but would likely give you the most space (up to 3.6TB)

    http://ironport.com/pdf/ironport_m-series_datasheet.pdf

Andreas Mueller
Level 4
Level 4

Hello Jacky,

in addition to the suggestions Bob made already, if you just have to keep logging data for legal reasons, the recommented solution would be to push the mail logs to another server (syslog, ftp push), and keep them there for as long as you want. They contain all the information that message tracking provides, the acess is different (grep, findevent), but still you'll be able to look up messages or connections later.

Hope that helps,

Andreas

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: