cancel
Showing results for 
Search instead for 
Did you mean: 
aleksije
Level 7

No user-defined-logs after deleting Log Handler Ruleset

Jump to solution

Hello,

I've deleted default log handler in Log Handler Ruleset, and after creating a new one, apparently identical to previous, user-defined-logs are not created anymore.

Settings for File System Logging / Access Log Configuration ... are unchanged.

Is there something I'm missing?

Many thanks,

Alex

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: No user-defined-logs after deleting Log Handler Ruleset

Jump to solution

Yeah, that will happen. It's not supposed to be deleted. We can try to fix it, but I think it could have larger implications for special logs.

You need to now set in your rules the log handler. This will force the MWG to call the correct log handler.

log_handler_2013-07-09_125039.png

I would advise reverting back to a previous configuration if possible.

If you have an SR, please let me know it.

Best,

Jon

0 Kudos
3 Replies
McAfee Employee

Re: No user-defined-logs after deleting Log Handler Ruleset

Jump to solution

Yeah, that will happen. It's not supposed to be deleted. We can try to fix it, but I think it could have larger implications for special logs.

You need to now set in your rules the log handler. This will force the MWG to call the correct log handler.

log_handler_2013-07-09_125039.png

I would advise reverting back to a previous configuration if possible.

If you have an SR, please let me know it.

Best,

Jon

0 Kudos
McAfee Employee

Re: No user-defined-logs after deleting Log Handler Ruleset

Jump to solution

My rule will work for normal transactions (when a user makes a request).

If you start having problems using the error handler/monitoring. The same ruleset could be required to be placed under there as well.

Best,

Jon

0 Kudos
aleksije
Level 7

Re: No user-defined-logs after deleting Log Handler Ruleset

Jump to solution

Actually, I've found a configuration backup.

What I did was backup current configuration, then restore old backup (in order to restore default log handlers), and then restored current ruleset, without log handlers.

Your solution does provide a working logs, however, so it would have been a lifesaver, had I not found the backups.

0 Kudos