Cloud Web Security log file retention policy and expiration


<< Back to Knowledge Search

Solution

Overview

Received a report data expiration notice
When will my logs expire?
How do I download my log files?
Is there a way to automate the download of the expired log files?
What about my hosted reporting data?  When does it expire?

Cause
Resolution

If you have the Web Security product, after the 3.0 Cloud upgrade that happened on March 29, 2012, if you are a production Cloud customer you should have received the following email notification from CloudServices@bluecoat.com:

=================================

We're writing to let you know that your reporting data from Web Security will start to expire seven (7) days from receipt of this email.  Your current entitlement allows you 100 days' worth of reporting data and 100 days' worth of log data.

After 2012-Apr-06 12:00:01 UTC, data older than 100 days will be automatically expired and irreversibly deleted on a daily basis.

Should you wish to save your logs off, please do so at this link:

     https://portal.threatpulse.com/

You will NOT receive additional notifications of these expirations.

Thank you,
Blue Coat ThreatPulse Security Service

=================================

DOWNLOADING LOG FILES

To download the log files, go to https://portal.threatpulse.com/ and go to Service > Reporting > Log Download.  The portal will show the oldest ten (10) log files.  You can put a check or tick mark next to "Files (Dates in UTC)" and download all ten files at once.  At the bottom left portion of the screen, you can move forward one page and then download the next 10 log files in the list.

AUTOMATING LOG FILE DOWNLOAD

Currently there is not a way to automate log file downloads.  For a procedure, initially you can download all log files available to you, up to the last month.  Moving forward, at the beginning of each month, you can then download the previous month's worth of data.

HOSTED REPORTING

The expiration time frame for hosted reporting is one year instead of 100 days.

Workaround
Additional Information
Bug Number
InQuira Doc IdKB5040
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Product      Cloud Security Service
Topic      Access Logging
Article Number      000008682
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat