Various events occur during the operation of Kaspersky Secure Mail Gateway. They reflect changes in the status of the program. To allow the program administrator to analyze errors in program settings and enable Kaspersky representatives to provide effective technical support, Kaspersky Secure Mail Gateway logs information about such events in the event log.
Event log data is stored for the entire duration of Kaspersky Secure Mail Gateway usage and is deleted permanently when the program is uninstalled. Event log files are automatically rotated when the files reach the file size limit.
Kaspersky Secure Mail Gateway keeps the event log within the operating system log (syslog) in the Mail category. You can change the category of the event log.
Kaspersky Secure Mail Gateway categorizes events in terms of the following levels:
Events of the Info level can contain email addresses of message senders and recipients, attachment names, IP addresses of computers from which messages were sent, and detailed information about message scan results.
By default, Kaspersky Secure Mail Gateway logs only events with the Info importance level in the event log (see table below). You can configure all program events to be recorded in the log.
Events in the event log
Event |
Description |
Event level |
|---|---|---|
RuleSettingsChangedEvent |
Message processing rule settings have been changed. |
Info |
TaskSettingsChangedEvent |
Task settings have been changed. |
Info |
MessageProcessedEvent |
Message has been processed. |
Info |
MessageNotProcessedEvent |
Message has not been processed. |
Info |
MessageQuarantinedEvent |
Message has been placed in Backup. |
Info |
ProductStartEvent |
Application has been started. |
Info |
ScheduledReportError |
Error creating scheduled report. |
Error |
ScheduledReportGenerated |
Scheduled report has been generated. |
Info |
BackupLimitReachedEvent |
Backup size limit has been reached. |
Info |
BackupRestoreAvThreatEvent |
Message from Backup has been saved to a file or sent to recipients. |
Info |
BackupAddErrorEvent |
Error adding message to Backup. |
Error |
BackupRotateErrorEvent |
Error automatically freeing up space in Backup. |
Error |
AvUpdateErrorEvent |
Error updating Anti-Virus databases. |
Error |
AvBasesLoadError |
Error loading Anti-Virus databases. |
Error |
AspUpdateErrorEvent |
Error updating Anti-Spam databases. |
Error |
AspBasesLoadError |
Error loading Anti-Spam databases. |
Error |
ApUpdateErrorEvent |
Error updating Anti-Phishing databases. |
Error |
ApBasesLoadError |
Error loading Anti-Phishing databases. |
Error |
AvBasesAttachedEvent |
Anti-Virus databases have been updated. |
Info |
ApBasesAttachedEvent |
Anti-Phishing databases have been updated. |
Info |
AspBasesAttachedEvent |
Anti-Spam databases have been updated. |
Info |
NothingToUpdateEvent |
No update required. |
Info |
AvBasesOutdatedEvent |
Anti-Virus databases are out of date. |
Info |
AspBasesOutdatedEvent |
Anti-Spam databases are out of date. |
Info |
ApBasesOutdatedEvent |
Anti-Phishing databases are out of date. |
Info |
AvBasesObsoleteEvent |
Anti-Virus databases are obsolete. |
Info |
AspBasesObsoleteEvent |
Anti-Spam databases are obsolete. |
Info |
ApBasesObsoleteEvent |
Anti-Phishing databases are obsolete. |
Info |
AvBasesAppliedEvent |
Anti-Virus databases have been downloaded. |
Info |
AspBasesAppliedEvent |
Anti-Spam databases have been downloaded. |
Info |
ApBasesAppliedEvent |
Anti-Phishing databases have been downloaded. |
Info |
LicenseBlacklistedEvent |
Key is in the black list of keys. |
Error |
LicenseExpiredEvent |
License has expired. |
Error |
LicenseExpiresSoonEvent |
License expires soon. |
Info |
LicenseErrorEvent |
Key related error. |
Error |
LicenseInstalledEvent |
Key has been added. |
Info |
LicenseRevokedEvent |
Key has been deleted. |
Info |
TaskCrashEvent |
Process returned an error. |
Error |
TaskRestartEvent |
Process has been restarted. |
Info |
QueueFlushMessageSuccessEvent |
Forced delivery of a single message from the queue is successful. |
Info |
QueueFlushMessageFailureEvent |
Forced delivery of a single message from the queue returned an error. |
Error |
QueueFlushAllSuccessEvent |
Forced delivery of all messages from the queue is successful. |
Info |
QueueFlushAllFailureEvent |
Forced delivery of all messages from the queue returned an error. |
Error |
QueueDeleteMessageSuccessEvent |
Removal of a single message from the queue is successful. |
Info |
QueueDeleteMessageFailureEvent |
Removal of a single message from the queue returned an error. |
Error |
QueueDeleteAllSuccessEvent |
Removal of all messages from the queue is successful. |
Info |
QueueDeleteAllFailureEvent |
Removal of all messages from the queue returned an error. |
Error |
MailProcessingChangeSuccessEvent |
Change of the message send or receive status: successful. |
Info |
MailProcessingChangeFailureEvent |
Change of the message send or receive status: error. |
Error |
TLSServerCertificateWasChanged |
Modifying a TLS certificate. |
Info |