Various events occur during the operation of Kaspersky Secure Mail Gateway. They reflect changes in the status of the application. To allow the application administrator to analyze errors in application settings and enable Kaspersky Lab representatives to provide effective technical support, Kaspersky Secure Mail Gateway logs information about such events in the event log.
Event log data is stored for the entire duration of Kaspersky Secure Mail Gateway usage and is deleted permanently when the application is uninstalled. Event log files are automatically rotated when the files reach the file size limit.
Kaspersky Secure Mail Gateway keeps the event log in the system log of the operating system (syslog) in the Mail category. You can change the category of the event log in the system log.
Kaspersky Secure Mail Gateway categorizes events in terms of the following levels:
Events of the Info level can contain email addresses of message senders and recipients, attachment names, IP addresses of computers from which messages were sent, and detailed information about message scan results.
By default, Kaspersky Secure Mail Gateway logs only events with the Info level of importance in the event log (see table below). You can configure all application events to be recorded in the log.
Events in the event log
Event |
Description |
Event level |
|---|---|---|
RuleSettingsChangedEvent |
Message processing rule settings have been changed. |
Info |
TaskSettingsChangedEvent |
Task settings have been changed. |
Info |
MessageProcessedEvent |
Message has been processed. |
Info |
MessageNotProcessedEvent |
Message has not been processed. |
Info |
MessageQuarantinedEvent |
Messages has been placed in Backup. |
Info |
ProductStartEvent |
Application has been started. |
Info |
ScheduledReportError |
Error creating scheduled report. |
Error |
ScheduledReportGenerated |
Scheduled report has been generated. |
Info |
BackupLimitReachedEvent |
Backup limit size has been reached. |
Info |
BackupRestoreAvThreatEvent |
Message from Backup has been saved to file or sent to recipients. |
Info |
BackupAddErrorEvent |
Error adding message to Backup. |
Error |
BackupRotateErrorEvent |
Error automatically freeing up space in Backup. |
Error |
AvUpdateErrorEvent |
Error updating Anti-Virus databases. |
Error |
AvBasesLoadError |
Error loading Anti-Virus databases. |
Error |
AspUpdateErrorEvent |
Error updating Anti-Spam databases. |
Error |
AspBasesLoadError |
Error loading Anti-Spam databases. |
Error |
ApUpdateErrorEvent |
Error updating Anti-Phishing databases. |
Error |
ApBasesLoadError |
Error loading Anti-Phishing databases. |
Error |
AvBasesAttachedEvent |
Anti-Virus databases have been updated successfully. |
Info |
ApBasesAttachedEvent |
Anti-Phishing databases have been updated successfully. |
Info |
AspBasesAttachedEvent |
Anti-Spam databases have been updated successfully. |
Info |
NothingToUpdateEvent |
No database update required. |
Info |
AvBasesOutdatedEvent |
Anti-Virus databases are out of date. |
Info |
AspBasesOutdatedEvent |
Anti-Spam databases are out of date. |
Info |
ApBasesOutdatedEvent |
Anti-Phishing databases are out of date. |
Info |
AvBasesObsoleteEvent |
Anti-Virus databases are obsolete. |
Info |
AspBasesObsoleteEvent |
Anti-Spam databases are obsolete. |
Info |
ApBasesObsoleteEvent |
Anti-Phishing databases are obsolete. |
Info |
AvBasesAppliedEvent |
Anti-Virus databases have been loaded successfully. |
Info |
AspBasesAppliedEvent |
Anti-Spam databases have been loaded successfully. |
Info |
ApBasesAppliedEvent |
Anti-Phishing databases have been loaded successfully. |
Info |
LicenseBlacklistedEvent |
Key is blacklisted. |
Error |
LicenseExpiredEvent |
License has expired. |
Error |
LicenseExpiresSoonEvent |
License expires soon. |
Info |
LicenseErrorEvent |
Key related error. |
Error |
LicenseInstalledEvent |
Key has been added successfully. |
Info |
LicenseRevokedEvent |
Key has been removed successfully. |
Info |
TaskCrashEvent |
Process returned an error. |
Error |
TaskRestartEvent |
Process has been restarted. |
Info |
QueueFlushMessageSuccessEvent |
Forced delivery of a single message from the queue is successful. |
Info |
QueueFlushMessageFailureEvent |
Forced delivery of a single message from the queue returned an error. |
Error |
QueueFlushAllSuccessEvent |
Forced delivery of all messages from the queue is successful. |
Info |
QueueFlushAllFailureEvent |
Forced delivery of all messages from the queue returned an error. |
Error |
QueueDeleteMessageSuccessEvent |
Removal of a single message from the queue is successful. |
Info |
QueueDeleteMessageFailureEvent |
Removal of a single message from the queue returned an error. |
Error |
QueueDeleteAllSuccessEvent |
Removal of all messages from the queue is successful. |
Info |
QueueDeleteAllFailureEvent |
Removal of all messages from the queue returned an error. |
Error |
MailProcessingChangeSuccessEvent |
Change of the message send or receive status: successful. |
Info |
MailProcessingChangeFailureEvent |
Change of the message send or receive status: error. |
Error |
TLSServerCertificateWasChanged |
Modifying a TLS certificate. |
Info |