Welcome to ISAserver.org

Log filter and MSDE database

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Logging and Reporting >> Log filter and MSDE database

Page: [1]

Message

<< Older Topic Newer Topic >>

Log filter and MSDE database - 28.May2007 1:44:11 PM

mjgraves@tisecurity.

Posts: 41
Joined: 19.Jun.2006
Status: offline

When I go to the log filter to search for past transactions or limit what is displayed live, is that also affecting what is being written to the MSDE database live?

Say I am filtering for certain source IP live to troubleshoot a problem, does all log data continue to be written to the database or just what the log filter is displaying?

Thanks.

_____________________________

Mark

Post #: 1

Featured Links*

RE: Log filter and MSDE database - 28.May2007 5:55:47 PM

Jason Jones

Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

The filters only apply to displayed data, not written data.

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mjgraves@tisecurity.)

Post #: 2

RE: Log filter and MSDE database - 29.May2007 8:45:34 AM

mjgraves@tisecurity.

Posts: 41
Joined: 19.Jun.2006
Status: offline

Jason,

Thanks for the quick and helpful response.

Mark

_____________________________

Mark

(in reply to Jason Jones)

Post #: 3

RE: Log filter and MSDE database - 29.May2007 9:53:40 AM

mjgraves@tisecurity.

Posts: 41
Joined: 19.Jun.2006
Status: offline

Jason,

One more question. I am running 2 ISA 2006 servers in an array. Each physical machine is writing its own logs to MSDE on that machine.

So to back and restore these I would actually have 2 sources if MSDE to consider?

_____________________________

Mark

(in reply to mjgraves@tisecurity.)

Post #: 4

RE: Log filter and MSDE database - 29.May2007 6:08:35 PM

Jason Jones

Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Yep!

As you are running Enterprise, you also have the option of getting both array members to write to a central SQL server which can then be backed up more easily. You could then remove MSDE logging from each server (if you wanted to).

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mjgraves@tisecurity.)

Post #: 5

RE: Log filter and MSDE database - 30.May2007 10:24:51 AM