Logging settings

This section describes the Logging section of the Settings page.

If an error occurred during loading of the web page and the settings are unavailable, reload the page.

The Logging section contains two subsections: Syslog and Log files.

The Syslog section allows you to do the following:

• Start or stop syslog logging

  If you enable sending syslog messages, consider that these messages will contain sensitive data, such as personal data as defined by GDPR, configuration data of the product, and licensing information.

• Specify syslog logging settings

  The settings for HTTP mode and ICAP mode are different.

To add and configure the destination for syslog messages in HTTP or ICAP mode:

1. Choose the types of events that will be logged into the specified destination.

   When syslog logging is enabled, the Audit events cannot be completely excluded from syslog messages.

2. Specify the format of syslog messages:
   • CEF

     The format of CEF logs is different in HTTP mode and ICAP mode.

   • RAW

     The format of RAW logs is different in HTTP mode and ICAP mode.

3. Choose the destination that will be used for writing logs:
   • syslog daemon
   • file

     Specify the path to the directory where the log file will be created. This path could be absolute or relative to the directory that holds the executable file of the service (kavhttpd for HTTP mode and kavicapd for ICAP mode).

   • remote syslog

     Specify the %PROTOCOL%%IP%:%PORT% value, where %PROTOCOL% is a network protocol (use tcp:// or udp:// for this value), %IP% is an IPv4 address that receives syslog messages, and %PORT% is a port that receives syslog messages.

The Log files section allows you to do the following:

• Start or stop debug logging

  If you enable debug logging, consider that the log messages will contain sensitive data, such as personal data as defined by GDPR, configuration data of the product, and licensing information.

• Export log files

  This action is available if debug logging is stopped.

• Delete logs

  This button is available if debug logging is stopped.

The Log files section also displays:

• Log directory—Path to the directory where log files will be stored

You cannot change this setting by using the Kaspersky Scan Engine GUI. You must edit the corresponding configuration file. Depending on the mode that you chose in the Kaspersky Scan Engine configuration file, specify the path in httpdkavlog.ini or icapdkavlog.conf for HTTP mode and ICAP mode, respectively.

• Log size (MB)—Current log size in megabytes.