Logging settings

This section describes the Logging section of the Settings page.

If an error occurred during loading of the web page and the settings are unavailable, reload the page.

The Logging section contains two subsections: Syslog and Log files.

The Syslog section allows you to do the following:

• Start or stop syslog logging

  If you enable sending syslog messages, consider that these messages will contain sensitive data, such as personal data as defined by GDPR, configuration data of the product, and licensing information.

• Specify syslog logging settings

  The settings for HTTP mode and ICAP mode are different.

To add and configure the destination for syslog messages in HTTP mode:

1. Specify the format of syslog messages:
   • CEF

     For more information about this format, see section "Format of CEF logs in HTTP mode".

   • RAW

     For more information about this format, see section "Format of RAW logs in HTTP mode".

2. Choose the destination that will be used for writing logs:
   • syslog daemon
   • file

     Specify the path to the directory where the log file will be created. This path could be absolute or relative to the directory that holds the kavhttpd executable file.

   • remote syslog

     Specify the %PROTOCOL%%IP%:%PORT% value, where %PROTOCOL% is a network protocol (use tcp:// or udp:// for this value), %IP% is an IPv4 address that receives syslog messages, and %PORT% is a port that receives syslog messages.

To add and configure the destinations for syslog messages in ICAP mode:

1. Click the Add button.
2. Choose the types of events that will be logged into the specified destination.
3. Specify the format of syslog messages:
   • CEF

     For more information about this format, see section "Format of CEF logs in ICAP mode".

   • RAW

     For more information about this format, see section "Format of RAW logs in ICAP mode".

4. Choose the destination that will be used for writing logs:
   • syslog daemon
   • file

     Specify the path to the directory where the log file will be created. This path could be absolute or relative to the directory that holds the kavicapd executable file.

   • remote syslog

     Specify the %PROTOCOL%%IP%:%PORT% value, where %PROTOCOL% is a network protocol (use tcp:// or udp:// for this value), %IP% is an IPv4 address that receives syslog messages, and %PORT% is a port that receives syslog messages.

5. If necessary, click the Add button to add another destination setting.

The Log files section allows you to do the following:

• Start or stop debug logging

  If you enable debug logging, consider that the log messages will contain sensitive data, such as personal data as defined by GDPR, configuration data of the product, and licensing information.

• Export log files

  This action is available if debug logging is stopped.

• Delete logs

  This button is available if debug logging is stopped.

The Log files section also displays:

• Log directory—Path to the directory where log files will be stored

  You cannot change this setting by using the Kaspersky Scan Engine GUI. You must edit the corresponding configuration file. Depending on the mode that you chose in the Kaspersky Scan Engine configuration file, specify the path in httpdkavlog.ini or icapdkavlog.conf (for more information, see sections "Configuring logging in HTTP mode" and "Configuring logging in ICAP mode").

• Log size (MB)—Current log size in megabytes.

Page top