The LOGS page displays system log events of system processes on the box layer and, if present, for the virtual server layer and each configured service. Log files can be viewed and filtered conveniently with the log viewer of the Barracuda NextGen Admin application while the log files are stored by default in the
/var/phion/logs directory of the F-Series Firewall or Control Center. For detailed information on the log file structure and available log files, see Logging.
To access the LOGS page, click the LOGS tab.
Viewing Log File Entries
On the Logs page, you can select the log file that you want to view from the Select Log File drop-down list.
In this list, log files are organized into a tree hierarchy. At the top level of the file tree, log files are divided into the following directories:
- Box – Contains events on the box level. Various box-specific daemons are included here. Within this section, the log files are grouped by operation or services. The following types of log files are documented with the Box_ prefix. For more information, see Available Log Files and Structure.
- Reports – The following logs are documented with the Reports_ prefix. They include entries that are carried out in continuous intervals, such as cronjobs. For more information, see Available Log Files and Structure.
- Fatal – All fatal errors that can occur on a firewall are, in addition to the original log file, collected in this section. The original log file is added in the fatal log message text as a prefix.
- Server – This directory contains log files that deal with server and services support, depending on what services are implemented on the firewall. These logs are documented with the server prefix. For example S1. For more information, see Available Log Files and Structure.
Managing and Filtering Log Files
To view detailed entries for a log file, double-click it.
To delete a log file, expand the log-file tree, right-click the log, and select Delete Log. To clear the log cache, select Clear Log Cache.
Clearing the log cache can help correct inaccurate pointers that were set by the logwrapd during periods of high log activity. When inaccurate pointers are set, log entries are not filtered correctly by date and time. If clearing the log cache does not help, renew the log cache by restarting the logwrapd service. For more information, see Server Page.
To view a log file in real time. Click Live Update.
If the system takes too long to update or filter the log file entries, you can click Abort to terminate the task. To update the log tree, click Reload Log File Tree.
To open an additional log without replacing logs that are currently open, click the <new Log> tab. Then, select the log file that you want to view from the Select Log File list.
To only display a specific entry type, select the desired log file type from the type list next to the Filter field.
To limit the number of entries that are displayed, enter the maximum number of entries in the Max Entries field. To filter log file entries, enter the characters for the log file in the Filter field. By doing so, the bordering hook is automatically enabled. This signifies that the filter is enabled and should be disabled to deactivate the filter. You can also define your own filter. To do so, click New Filter and specify the criteria in the Advanced Log Filter window.
Navigating through Log File Entries
In the navigation section of the Logs page, you can specify a time and date to view logs that were created within a set time interval. After selecting a log that you want to view, you can navigate through the log entries with the following navigation buttons:
– Browse log entries that were created before the specified time and date.
– Browse log entries that were created after the specified time and date.
– Browse back from the current entry.
– Browse forward from the current entry.
– Browse to the beginning of the log.
– Browse to the end of the log.