Table: Work with the message audit log and message queue
Learn more about Symantec Messaging Gateway message audit logging.
Symantec Messaging Gateway provides a message auditing component that lets you search for messages and find out what has happened to them. When enabled, the message audit log provides administrators with a trail of detailed information about every message that has been accepted and processed by a Scanner. Auditing information is used to track what decisions were made within a single Scanner framework. The message audit log is not intended to replace debug or information level logging. Unlike standard Scanner logging, the message audit log provides information specifically associated with a message.
By default the message audit log is enabled for local logging and disabled for remote logging. This feature needs to be enabled before any auditing information is available for viewing or searching. Storage for message auditing can become large, and searching the logs can create high demand for Scanner processing time.
To view a CSV file that contains double-byte characters in Microsoft Excel, specify a comma-delimited, UTF-8 file in the MSExcel Text Import Wizard. Alternatively, you can open the CSV file in a text editor that can convert UTF-8 to Unicode, such as Notepad, and save the CSV file as Unicode.
A message queue is a temporary holding area for messages before they reach their destination. The messages queues are: inbound, outbound, and delivery. The message queue size fluctuates based on mail flow.
If a queue continually grows without decreasing in size, there is a problem with message delivery.
View the messages that are queued at any time to troubleshoot an issue.
At a minimum, you must specify the host and the queue that you want to view: inbound, outbound, or delivery. Symantec Messaging Gateway also has filtering options that let you further customize the queued messages to view. Based on your filter criteria, Symantec Messaging Gateway displays the messages that are in that queue at that moment. If there is an error associated with the message, it appears in the Message column.
When you view a message queue, you may find that a message has blocked the queue. You can delete that message so that the messages behind it can pass through the queue. Once you delete a queued message, you cannot retrieve it. You can delete all of the messages in a queue.
When you flush a message queue, you instruct the MTA to try to resend the messages that were deferred due to delivery problems. You may want to flush your inbound, outbound, and delivery email queues before you turn off an appliance.
Monitor the status of the message queue to determine if the message queue is clogged.
You can view the number of queued messages and the size of the queues for all of your message queues. You can set the maximum size for each message queue and decide whether to defer messages when the queue is full on the SMTP Advanced Settings page.
When a message queue becomes too large, Symantec Messaging Gateway can become unresponsive or crash. To attempt to deter this issue, by default, Symantec Messaging Gateway defers new messages when the queue is full. As a best practice, you should leave this setting enabled and keep queue limits below the recommended default thresholds.