Logging and Reporting : Using the event log
 
Using the event log
The Event Log table displays logs related to system-wide status and administrator activity.
Figure 40 shows the Event log table. By default, the log is filtered to display configuration changes, and the table lists the most recent records first.
Figure 40:   Event log
You can use the following category filters to review logs of interest:
Configuration—Configuration changes
System—System operation messages, such as notice of firmware upgrades
Admin—Administrator actions, such a logging in and logging out
Application—Status returned by configured application behavior, such as health checks
Within each category, you can use Filter Setting controls to filter the table based on the values of matching data.
Table 74: Filter settings
Category Filters
Data Filters
Configuration
Date
Time
Log Level
User
Action
System
Date
Time
Log Level
Submod
User
Action
Status
Admin
Date
Time
Log Level
User
Action
Status
Application
Date
Time
Log Level
Module
Policy
Group
Member
Status
The last column in each table includes a link to log details.
Before you begin:
You must have Read-Write permission for Log & Report settings.
To view and filter the log:
1. Go to Log & Report > Log Browsing.
The log page displays the Event Logs tab.
2. Click Filter Settings to display the filter tools.
3. Use the tools to filter on key columns and values.
4. Click OK to apply the filter and redisplay the log.
Table 75 through Table 78 list the log columns for the event log types in the order in which they appear in the log.
Table 75: Event log — Config
Column
Example
Description
date
date=2014-12-01
Log date.
time
time=15:50:37
Log time.
log_id
log_id=0000000085
Log ID.
type
type=event
Log type.
subtype
subtype=config
Log subtype.
pri
pri=information
Log level.
vd
vd=root
Virtual domain.
msg_id
msg_id=522000
Message ID.
user
user=admin
User that performed the operation.
ui
ui=GUI(172.30.144.8)
User interface from which the operation was performed.
action
action=add
Administrator action: add, edit, delete.
cfgpath
cfgpath=firewall qos-queue
Configuration that was changed.
cfgobj
cfgobj=name
Configuration setting changed.
cfgattr
cfgattr=queue
Configuration value changed.
msg
msg=added a new entry 'queue' for "firewall qos-queue" on domain "root"
Log message.
 
Table 76: Event log — System
Column
Example
Description
date
date=2014-12-01
Log date.
time
time=16:00:09
Log time.
log_id
log_id=0003000011
Log ID.
type
type=event
Log type.
subtype
subtype=system
Log subtype.
pri
pri=error
Log level.
vd
vd=root
Virtual domain.
msg_id
msg_id=522008
Message ID.
submod
submod=update
System submodule.
user
user=none
None.
ui
ui=none
None.
action
action=update
System action, such as (firmware) update, HA join and leave, and the like.
status
status=failure
Status message: success or failure.
msg
msg=
Log message (if any).
 
Table 77: Event log — Admin
Column
Example
Description
date
date=2014-12-01
Log date.
time
time=15:44:38
Log time.
log_id
log_id=0001016834
Log ID.
type
type=event
Log type.
subtype
subtype=admin
Log subtype.
pri
pri=information
Log level.
vd
vd=root
Virtual domain.
msg_id
msg_id=521996
Message ID.
user
user=admin
User that performed the operation.
ui
ui=GUI(172.30.144.8)
User interface from which the operation was performed.
action
action=logout
System action.
statue
statue=success
Status message: success or failure.
reason
reason=none
Reason string (if any).
msg
msg=User admin logout from GUI(172.30.144.8).
Log message.
 
Table 78: Event log — Application
Column
Example
Description
date
date=2014-12-02
Log date.
time
time=07:50:36
Log time.
log_id
log_id=0002000837
Log ID.
type
type=event
Log type.
subtype
subtype=app
Log subtype.
pri
pri=alert
Log level.
vd
vd=root
Virtual domain.
msg_id
msg_id=522030
Message ID.
module
smodule=slb
System module: slb, llb.
policy
policy=none
Not used.
group
group=test2
Real server pool group or link group.
member
member=1
Real server member ID or gateway ID.
statue
statue=failure
Health check result: success or failure.
action
action=health_check
Type of message: health check.
msg
msg=pool test2 rs_id 1 rs_ip 192.168.0.1 is DOWN
Log message.