CASS (Comprehensive Anti-Spam Service) Log Files Overview
03/26/2020 6 12803
When contacting Sonicwall Technical Support, CASS Logs may be requested, below is an overview of the CASS Logs, and how to generate them in the correct logging level required for troubleshooting purposes.
Assuming the junkstore is installed, if the junkstore is not installed, then no logs can be generated.
Open your Sonicwall Firewall and go to Anti-Spam | Advanced.
(Before you generate data, please ensure that you have set the Log Level to "Debug"), Info is not sufficient for most troubleshooting purposes. You can set the Log Level by going to Other Settings | Log Level | Manage and selecting the "Default Log Level" dropdown. It is not recommended to leave the Logging Level of the CASS to Debug for extended periods of time, due to increased resource usage on the host machine containing the junkstore.
Now that you have set the Debug Logging Level, you can download the log files you require (assuming the issue you are troubleshooting has recreated itself) and you should have substantial data to troubleshoot.
To download the system logs, go to System | Advanced | Download System/Log Files and select the "Type of file:" dropdown menu, choosing the logs you require, (If you require logs from a specific timeframe, use the Shift or Ctrl Key to select the items you want) and hit "Download" or "Email To" based on your preference.
The amount of Logs available on CASS are substantial, for a brief overview of the most Common CASS Log files, and what they are used for, see below:
- Technical Support Package: this contains a subset of the files commonly required for troubleshooting the most command issues with CASS, as a best practice, ensure that you attach a copy of this in "Debug" Level to any CASS Case you may log with Sonicwall Support when opening the SR.
- logs: junknotifications: this log is used to troubleshoot failures related to the junk notifications that CASS sends out
- logs: smtp: this log gives the data of the SMTP plugin (filtering/judgement) as the email goes through the CASS System.
- logs: webui: this log is related to errors on the web interface, (if you are unable to see emails in the junkstore that should be there for example).