Forum Discussion
Infinity05_1794
Nimbostratus
Aug 05, 2010Can't view audits prior to today
When I'm looking at the Audit logs in the console (system->logs->audit), I can only see events for today. There is no "pages" option at the bottom to go back further. I'm guessing I'll have to the console to view logs prior to today?
We are on 9.4.3 build.
Thanks for taking the time to help me out!
4 Replies
- nathe
Cirrocumulus
Infinity05, I'm afraid so. The logs are rotated daily so unless you syslog to a remote server then console onto the appliance and check out the logs there.
N - Infinity05_1794
Nimbostratus
Thanks Nathan for the response. I've never used the console before, so can you either give me a quick how-to or point me to the right help page?
Thanks for the help - nathe
Cirrocumulus
Putty and WinSCP are your friends here.
I normally putty to the ip address (port 22) and then login with the admin credentials. Once there you need to go to the logs area (/var/log) and then all the relevant log files are here. The "tail" command is useful here to see the last 10 lines of whatever file you need (tail messages / tail ltm etc.)
Or else WinSCP and view in wordpad.
N - Infinity05_1794
Nimbostratus
That worked perfect Nathan. Thanks again for your timely responses!
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
