Viewing the logs

To view the logs in the Logs screen

Based on the products installed, you can view the logs in the Logs screen. Based on the components installed in ESA, the following are the logs are generated in the following screens:

  • Web Services Engine
  • Service Dispatcher
  • Appliance Logs

The information icon on the screen displays the order in which the new logs appear. If the new logs appear on top, you can scroll down through the screen the view the previously generated logs.

Viewing Web Services Engine Logs

In the Web Services screen, you can view the logs for all the Web services requests on ports, such as, 443 or 8443.

The Web Services logs are classified as follows:

  • HTTP Server Logs
  • SOAP Module Logs

The following figure illustrates the HTTP Server Logs.

HTTP Server Logs

Navigate to Logs > Web Services Engine > Web Services HTTP Server Logs to view the HTTP Server logs.

Viewing Service Dispatcher Logs

You can view the logs for the Service Dispatcher under Logs > Service Dispatcher > Service Dispatcher Logs.

The following figure illustrates the service dispatcher logs.

Service Dispatcher Logs

Viewing Appliance Logs

You can view logs of the events occurring in the appliance under Logs > Appliance. The Appliance Logs page lists logs for each event and provides options for managing the logs. The logs files (.log extension) that are in the /var/log directory appear on the appliance logs screen. The logs can be categorized as all appliance component logs, installation logs, patch logs, kernel logs, and so on.

Current Event Logs are the most informative appliance logs and are displayed by default when you proceed to the Appliance Logs page. Depending on the logging level configuration (set in the appropriate configuration files of the appliance components), the Current Event Logs display the events in accordance with the selected level of severity (No logging, SEVERE, WARNING, INFO, CONFIG, ALL).

Based on the configuration set for the logs, they are rotated periodically.

If the fluentd component is installed in the appliance, logs are sent to the Log Server. If the fluentd component is not installed in the appliance, logs are stored in /audits_from_rsyslog.log file under /var/log/pap directory.

The following figures illustrate the appliance logs.

Appliance Logs

The following table describes the actions you can perform on the appliance logs.

ActionDescription
PrintPrint the logs
DownloadDownload the logs to a specific directory
RefreshRefresh the logs
Save a copySave a copy of the current log with a timestamp
Purge LogClear the logs

If the logs are rotated, the following message appears.
Logs have been rotated. Do you want to continue with new logs?

Select OK to view the new logs generated.

For more information about configuring log rotation and log retention, refer here.

Last modified January 30, 2025