Download Logs from the GUI of Your CES ESA and CMD

Introduction

This document describes how to download logs from the Graphical User Interface (GUI) of your Secure Email Cloud Gateway (CES) via Command Line (CMD). 

Prerequisites

A user account with Administrator or Cloud Administrator permission. 

This process only applies to the CES Email Security Appliance as logs cannot be downloaded from the CES Secure Email and Web Management appliance with this method.

Download Logs From the GUI

1. Log into the GUI of your CES Email Security Appliance (ESA) instance and navigate to System Administration > Log Subscriptions.

2. Notice the URL seen in your browser (Example : System Administration Log Subscriptions)

3. Next, you need to review the Log Settings column and find a log that you wish to download. For this example, use mail_logs. 

4. Take the URL from step two and make the modifications:

     a. Remove /log_subscriptions.

     b. Append /log_list?log_type=<logname> to the end of the URL, where <logname> is replaced with what is shown under the Log Settings

         column.

     c. Replace dhXXXX-esa1.iphmx.com with the Fully Qualified Domain Name (FQDN) of your ESA.

Note: To use mail_logs as our example, System Administration Log Subscriptions becomes System Administration Log List.

5. Finally, navigate to the modified URL and log in. You would come to a page similar to what is shown in image where you can then click a file, download, and save it.

Download Logs from CMD

Make sure you have the CLI Access of the CES ESA. For steps to request CLI access, refer to the article Customer CLI Access.

It is recommended to use Putty SCP (PSCP) to have SSH access in order to pull the logs:

1. Download PSCP Download PuTTY
2. Open the proxy configuration that is enabled on ESA, and leave the proxy open.

3. Run CMD and type: pscp -P port -r <user>@localhost:/mail_logs/* /path/on/local/system

1. Port is the one that is previously configured for CLI access.
2. /mail_logs/ mean it downloads all the files under that particular folder.
3. If only the current file needs to be downloaded, type /mail_logs/mail.current or the log that is required.
4. Enter the password when requested once the command is entered.

Example Command: pscp –P 2200 -r admin@127.0.0.1:/mail_logs/ C:/Users/beanand/Downloads

Related Information

• Cisco Email Security Appliance - End-User Guides