Logs > Settings | Reporting Logs
You can keep Report Logs either on the hard drive, in the database, or both. However, Trend Micro recommends that you have IWSS write the logs to the database only.
With the exception of quarantine logs, the default IWSS log location is:
/etc/iscan/log
Virus log—includes viruses, worms, Trojans, etc.
URL blocking log—includes spyware, phish-related URLs, and URL Blocking rules
URL access log—bandwidth quotas
Performance log—threads, CPU usage
Gather performance data: Includes IWSS server name, event time and date, and performance metrics such as CPU utilization for the HTTP and FTP services, total responses processed by HTTP and FTP services, threads active at the log time. MORE>>
Logging interval: Specify how often you want IWSS to measure performance status (from 1 to 9 minutes)
Note: Gathering performance data can add noticeable overhead to IWSS operations — the system may slow.
Log HTTP access events—Includes all client FTP and HTTP requests; IWSS server name, the time and date, client identification, the IP address of the remote Web or FTP server, and the location and file name of whatever data was downloaded to the client machine (Web page elements as well as file downloads). MORE>>
Logging interval: Specify how often you want IWSS to record access events (from 1 to 2 minutes)
Number of days to store logs in database—Use this option to "auto-delete" old logs as new ones are added. Default is 30 days.
Database log update interval—Enter the frequency, in seconds, that you want IWSS write new logs to the database (if there are no new logs since the last database write, nothing will be updated).
Write logs to—By default, IWSS writes all logs to the policy database.
Database only—Select this option if you do not want IWSS to write logs to the local hard drive.
Database and log files—Select this option to have IWSS store logs in the directory specified above, and in the policy database.
Text
only—Select this option if you want to reduce the size of the database
due to large log files and if you want to export the log to third-party
software to create reports.
If you choose the text-only option, then neither reports nor logs
can be viewed from within IWSS. In
this case, you can only review the logs by directly opening the generated
text files.
Note: There is no automatic "clean up" of report logs written to the hard drive. You will need to delete old logs manually.