topic Logging server log issues in Firewall and Security Management

Logging server log issues

tommyV — Thu, 15 Jun 2023 12:00:28 GMT

We have R81.20 logging server that for some reason will stop displaying current logs. We reboot the managment server and then we see the logs. It is very hard to troubleshoot when we have this behavior happening. Cannot rely on what we see in logs. Has anyone ever had this issue? Thanks in advance for any info.

Re: Logging server log issues

Chris_Atkinson — Thu, 15 Jun 2023 13:03:40 GMT

Do you see traffic on port 257 while the issue is occuring or no? (verify with netstat / tcpdump)

Some other useful commands include:

Management:

cpstat mg -f log_server

Log server:

cpstat ls -f logging

Gateway:

cpstat fw -f log_connection

Re: Logging server log issues

AkosBakos — Thu, 15 Jun 2023 13:50:38 GMT

Hi,

Do you see any system related log in the SmartView? I mean that is there any error logs before it stops showing the logs?
Check the /var/log/messages , maybe there are relevant entries, eg.: cpm has stoppped