Criteria

File

Message Tracking

msgtra.imss.*

Policy Events

polevt.imss.*

System Events

sysevt.imss.*

MTA Events

/var/log/maillog*, imssdps.*, tlsagent.*

Sender Filtering

foxdns.log.*, foxmsg.*, foxreport.*, ers.imss.*, foxnullmsg.*, connblocked.imss.*, smtpconnagent.*

Content Scanning

log.imss.*, imssps.*, wrsagent.*, dtasagent.*

Administration

imssui.*, imssmgr.*, imsstasks.*, euqerror.imss.*, euqretry.imss.*, euqsynch.imss.*, msgsync.imss.*, msgretry.imss.*, Agent.log*, EntityMain.log*

System events logs are not sent to the Syslog server in InterScan Messaging Security Virtual Appliance (IMSVA)

Interscan Messaging Security Virtual Appliance9.1

Last updated: 2021/08/28

Solution ID: KA-0011599

Category: Configure

When enabling a specific Syslog Type (i.e. for System events), the information are not sent to the Syslog server.

We currently do not forward the events you see in the System Events query in the GUI to a syslog server, only the contents of the sysevt.imss.* file.

Information sent to Syslog servers are taken from the following files which can be found in /opt/trend/imss/log:

Criteria	File
Message Tracking	msgtra.imss.*
Policy Events	polevt.imss.*
System Events	sysevt.imss.*
MTA Events	/var/log/maillog, imssdps., tlsagent.*
Sender Filtering	foxdns.log., foxmsg., foxreport., ers.imss., foxnullmsg., connblocked.imss., smtpconnagent.*
Content Scanning	log.imss., imssps., wrsagent., dtasagent.
Administration	imssui., imssmgr., imsstasks., euqerror.imss., euqretry.imss., euqsynch.imss., msgsync.imss., msgretry.imss., Agent.log, EntityMain.log

Was this article helpful?