The WebUI Logging Menu
When using the cOS Core WebUI, there is a run-time information section that (among other things) contain a logging section, as shown in the screenshot below.
As can be seen above, there is a menu of six different memory logger (memlog) categories that can be selected. Below are answers to some common questions regarding the memlog feature.
How many logs are saved by memlog?
Roughly 500 logs are saved at any time for each logging category in the list shown. This amount may in some situations be above or below 500 logs. The reason for the variation depends on the variable size of the log messages and how many can fit in the allocated memory area.
How long are logs stored by memlog?
The logs are stored until the firewall either restarts or until the log limit of around 500 has been reached. Once the limit has been reached the oldest log entries are continuously replaced by the newer entries.
Are logs saved to disk by memlog?
No, memlog logs are only stored in memory and will be lost when the firewall restarts. However, they are preserved by a reconfigure operation. To store logs on disk, it is recommended to set up a log receiver object in cOS Core such as FWLog or Syslog.
Does each listed memlog category have its own log limit?
Yes, each memlog category (System, Anti-Virus, Application Control log etc) has its own memory allocation that allows about 500 log entries for each category.
Can these logs be viewed using the CLI?
Yes, the logsnoop CLI command can be used to do this. This command is documented in both the cOS Core Administration Guide and CLI Reference Guide.
21 Mar, 2023 core ipreputation log
14 Dec, 2022 incontrol ida log
23 Aug, 2022 vmware log ha rarp arp core
27 Oct, 2022 oneconnect log
15 Nov, 2022 tcp log core
7 Dec, 2022 pcapdump log cli core logsnoop
23 May, 2022 core log logreceiver
19 Apr, 2023 core hyperv serial console log
7 Nov, 2022 core arp log routing
17 Feb, 2021 incontrol log
5 Feb, 2021 incontrol log