Solutions

Cloud Web Security log file retention policy and expiration

Solutions ID:    KB5040
Version:    3.0
Status:    Published
Published date:    04/02/2012
Updated:    06/20/2013
 

Problem Description

Received a report data expiration notice
When will my logs expire?
How do I download my log files?
Is there a way to automate the download of the expired log files?
What about my hosted reporting data?  When does it expire?

Resolution

If you have the Web Security product, after the 3.0 Cloud upgrade that happened on March 29, 2012, if you are a production Cloud customer you should have received the following email notification from CloudServices@bluecoat.com:

=================================

We're writing to let you know that your reporting data from Web Security will start to expire seven (7) days from receipt of this email.  Your current entitlement allows you 100 days' worth of reporting data and 100 days' worth of log data.

After 2012-Apr-06 12:00:01 UTC, data older than 100 days will be automatically expired and irreversibly deleted on a daily basis.

Should you wish to save your logs off, please do so at this link:

     https://portal.threatpulse.com/

You will NOT receive additional notifications of these expirations.

Thank you,
Blue Coat ThreatPulse Security Service

=================================

DOWNLOADING LOG FILES

To download the log files, go to https://portal.threatpulse.com/ and go to Service > Reporting > Log Download.  The portal will show the oldest ten (10) log files.  You can put a check or tick mark next to "Files (Dates in UTC)" and download all ten files at once.  At the bottom left portion of the screen, you can move forward one page and then download the next 10 log files in the list.

AUTOMATING LOG FILE DOWNLOAD

Currently there is not a way to automate log file downloads.  For a procedure, initially you can download all log files available to you, up to the last month.  Moving forward, at the beginning of each month, you can then download the previous month's worth of data.

HOSTED REPORTING

The expiration time frame for hosted reporting is one year instead of 100 days.


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question