How do I change the retention period for service text logs?


This article applies to:

  • Trustwave MailMarshal (SEG)

Question:

How do I retain log files for a longer period of time in MailMarshal SMTP?

Procedure:

By default, the MailMarshal SMTP log files (including the Engine, Receiver, and Sender files and others) are overwritten every14 days (SEG 8.2.3 and below: every 5 days). If you want to retain these log files longer, you can do so by editing the registry as follows:

  • In MailMarshal 10.0 and above, open the Management Console and navigate to Advanced Settings. Add one or more of these values:
    • Controller.LogDays
    • Engine.LogDays
    • Sender.LogDays
    • Receiver.LogDays
      • Type: Integer
      • Value: The required number of days to keep log files
    • For the Array Manager, edit the file arraymanager.config.json
      • Before the closing brace, add an entry (including the comma):
        ,"LogDays": n
        where n is the number of days.
  • In MailMarshal 8.X and below, and ECM, edit the Registry and navigate to the appropriate key:
    • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default plus the service name
    • For full details of the location for each product version, see article Q10832.
    • Add a DWORD (integer) value, called "LogDays".
    • Set the value (decimal) to the number of days that you want to keep the log files.
    • The same registry value (LogDays) can be added to the Engine, Receiver, Sender, Controller, and Array Manager keys:
      • \Default\Engine
      • \Default\Receiver
      • \Default\Sender
      • \Default\Controller
      • \Manager
  • Commit configuration changes and restart the affected services.
WARNING: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Trustwave cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved.
Make sure that you back up your Registry prior to making any changes.

    This article was previously published as:
    NETIQKB29299
    Marshal KB247

Last Modified 4/1/2020.
https://support.trustwave.com/kb/KnowledgebaseArticle10447.aspx