Forum Discussion

Infinity05_1794's avatar
Infinity05_1794
Icon for Nimbostratus rankNimbostratus
Aug 05, 2010

Can't view audits prior to today

When I'm looking at the Audit logs in the console (system->logs->audit), I can only see events for today. There is no "pages" option at the bottom to go back further. I'm guessing I'll have to the console to view logs prior to today?

 

 

We are on 9.4.3 build.

 

 

Thanks for taking the time to help me out!

4 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Infinity05, I'm afraid so. The logs are rotated daily so unless you syslog to a remote server then console onto the appliance and check out the logs there.

     

     

    N
  • Thanks Nathan for the response. I've never used the console before, so can you either give me a quick how-to or point me to the right help page?

     

     

    Thanks for the help
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Putty and WinSCP are your friends here.

     

     

    I normally putty to the ip address (port 22) and then login with the admin credentials. Once there you need to go to the logs area (/var/log) and then all the relevant log files are here. The "tail" command is useful here to see the last 10 lines of whatever file you need (tail messages / tail ltm etc.)

     

     

    Or else WinSCP and view in wordpad.

     

     

    N