Relation between the 'shadow log format' on web filter and the logs on the Reporter


This article applies to:

  • WF 3.x, 4.x, 5.x
  • WFR 2.x, 3.x, 4.x, 5.x

Question:

  • What is the purpose of the "Shadow Log Format" on the Web Filter?

     

 

     

Reply:

The "Shadow log format" determines the format in which the logs from the filter is sent to the Enterprise Reporter and/or Security Reporter. The Log format could be in any one of the following formats:

  • Auto-detect: This is selected by default. Supports all version of the Enterprise Reporter/Security Reporters.
  • Post 2.0.10 log format(manual): Used if the web filter software version is 2.0.10 or higher and the Reporter version is 4.1.20.
  • Post 2.0 log format (manual): This should be selected when the Web Filter software version is 2.0 or higher, and the Enterprise Reporter version  is 4.1 or higher. This also supports the Warning Option feature in the web filter.
  • Post 1.9 log format (manual): This should be selected when the Web Filter software version is 1.9 or higher, and the Enterpise Reporter version is 3.75 or higher.
  • Pre 1.9 log format (manual): This should be selected when the Web filter software version is lower than 1.9, and the Enterprise Reporter software versions is lower than 3.75.


Last Modified 4/1/2013.
https://support.trustwave.com/kb/KnowledgebaseArticle15158.aspx