WSM User Guide - WatchGuard Technologies

Setting Global Logging and Notification PreferencesNotification tabTo configure e-mail notification.Together, these controls set the general configuration for events and notifications.Log file size and rollover frequencyYou can control the log rollover by size or by time. When this rollover occurs, the Log Server closes thecurrent log file and opens a new log file. The closed log file can be used for reports. Copy or move it to adifferent location to save it for archives.To find the best rollover size for your company, you must look at:• Storage space that is available• Number of days you want available• Size that is best to keep, open, and view• Number of event types that are recordedFor example, a small company can get 10,000 entries in two weeks, and a large company withmany policies enabled can easily have 100,000 entries in a day.• Traffic on the Firebox®• Number of reports to createTo create a weekly report, it is necessary to have eight or more days of data. This data can befound in more than one log file, if the log files are in the same location.It is good to monitor the new log files and adjust the configuration as necessary.Setting when log files rolloverYou can control when the log files rollover in the Log Files tab in the Log Server configuration interface.You also can manually start a rollover of the current log file. To do this, select File > Roll current log filefrom the Status/Configuration window.1 To set when log files rollover, click the Log Files tab.2 To roll the log file on a time interval, select the Roll Log Files By Time Interval check box. Set thetime interval. From the Next Log Roll is Scheduled For drop-down list, select a date when the logfile rolls.3 To roll the log file based on the size of the log file, select the Roll Log Files By File Size check box.Type the maximum size for the log file before the file rolls, or use the spin control to set the number.User Guide 87