Kaspersky Security 9.0 for Microsoft Exchange Servers Maintenance Release 4 Help

Application logs

Kaspersky Security records its operation details (such as error messages or warnings) to Windows Event Log and Kaspersky Security event logs.

About Windows Event Log

Windows Event Log contains the details of the Kaspersky Security operation that the Kaspersky Security administrator or the security officer can use to monitor the application operation.

Events related to the Kaspersky Security operation are recorded to Windows Event Log by KSCM8 (Kaspersky Security service). Each basic events related to the application operation has a respective fixed event code. You can use an event code to find and filter events in a log.

About event logs in Kaspersky Security

Kaspersky Security event logs are files in TXT format that are stored locally in the folder <Application installation folder>\logs. You can specify a different folder to store logs.

The detail level of application event logs depends on the current settings of log detail level.

Kaspersky Security maintains event logs according to the following algorithm:

• The application records information to the end of the most recent log.
• When the log's size reaches 100 MB, the application archives it and creates a new one.
• By default, the application stores log files for 14 days since the last modification, and then deletes them. You can set a different term for log storage.

Separate logs are created individually for each Security Server irrespectively of the application deployment variant.

The folder with logs and the folder with the application data (<Application installation folder>\data) may contain confidential data. The application does not ensure protection against unauthorized access to data in those folders. You should take your own steps to protect the data in those folders against unauthorized access.