Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Performing Content Scanning (Spam) logs query in ScanMail for Exchange (SMEX)

    • Updated:
    • 20 Apr 2021
    • Product/Version:
    • ScanMail for Exchange 14.0
    • Platform:
Summary

Currently it is not possible to query the logs for the Content Scanning (Spam) detection filter directly from the ScanMail for Microsoft Exchange administrator console.

This article explains different ways to query those logs.

Details
Public

To perform the Content Scanning (Spam) log query, do the steps below:

  1. Send the logs to Apex Central.
    1. On the SMEX web console, navigate to Administration > Apex Central Settings.
    2. Tick the Send spam logs to Apex Central option.

      Spam Logs

      Those logs will appear in Apex Central under the "Content violation category".

      Content Violation

      Click the image to enlarge.

       

  2. Send logs via syslog to a third-party log management system.
    1. In the Apex Central console, go to Logs > Log Forwarding.
    2. Under Log Type, make sure the Spam Prevention is selected.

      Log Forwarding Settings

      Click the image to enlarge.

 
The log forwarding setting is only available starting with ScanMail for Exchange 14.
 

More information regarding the format of the syslog events sent by SMEX can be found in the following KB article: ScanMail for Exchange (SMEX) 14.0 Syslog content mapping guide

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000239721
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.