The WebUI Logging Menu

When using the cOS Core WebUI, there is a run-time information section that (among other things) contain a logging section, as shown in the screenshot below.

As can be seen above, there is a menu of six different memory logger (memlog) categories that can be selected. Below are answers to some common questions regarding the memlog feature.

How many logs are saved by memlog?

Roughly 500 logs are saved at any time for each logging category in the list shown. This amount may in some situations be above or below 500 logs. The reason for the variation depends on the variable size of the log messages and how many can fit in the allocated memory area.

How long are logs stored by memlog?

The logs are stored until the firewall either restarts or until the log limit of around 500 has been reached. Once the limit has been reached the oldest log entries are continuously replaced by the newer entries.

Are logs saved to disk by memlog?

No, memlog logs are only stored in memory and will be lost when the firewall restarts. However, they are preserved by a reconfigure operation. To store logs on disk, it is recommended to set up a log receiver object in cOS Core such as FWLog or Syslog.

Does each listed memlog category have its own log limit?

Yes, each memlog category (System, Anti-Virus, Application Control log etc) has its own memory allocation that allows about 500 log entries for each category.

Can these logs be viewed using the CLI?

Yes, the logsnoop CLI command can be used to do this. This command is documented in both the cOS Core Administration Guide and CLI Reference Guide.

Related articles