Log files

CLI Guide | Forcepoint Appliances | v8.4.x


Action and Syntax	Details
Display the last n lines of the appliance log file (limit 500). show log lastline app --line <integer> --type <audit\|system>	Line (required): The number of lines to display. Type (required): The log file type (audit or system). Example: (view)# show log lastline app --line 3 --type audit
Display the last n lines of the appliance log file (limit 500). show log lastline email --line <integer>	Line (required): The number of lines to display. Example: (view)# show log lastline email --line 3
Display the last n lines of the appliance log file (limit 500). show log lastline proxy --line <integer>	Line (required): The number of lines to display. Example: (view)# show log lastline proxy --line 3
Display the last n lines of the appliance log file (limit 500). show log lastline network-agent --line <integer>	Line (required): The number of lines to display. Example: (view)# show log lastline network-agent --line 3
Display the last n lines of the appliance log file (limit 500). show log lastline web --line <integer>	Line (required): The number of lines to display. Example: (view)# show log lastline web --line 3
Display data as it is appended to the appliance log file. show log realtime app [--filter <string>] --type <audit\|system> [--timeout <integer>]	Filter (optional): Literal string to match. Not a regular expression. Type: The log file type (audit or system). Timeout (optional): Amount of time to stream log (seconds). Example: (view)# show log realtime app --timeout 20 --type audit
Display data as it is appended to the appliance log file. show log realtime email [--filter <string>] [--timeout <integer>]	Filter (optional): Literal string to match. Not a regular expression. Timeout (optional): Amount of time to stream log (seconds). Example: (view)# show log realtime email --timeout 20
Display data as it is appended to the appliance log file. show log realtime proxy [--filter <string>] [--timeout <integer>]	Filter (optional): Literal string to match. Not a regular expression. Timeout (optional): Amount of time to stream log (seconds). Example: (view)# show log realtime proxy --timeout 20
Display data as it is appended to the appliance log file. show log realtime network-agent [--filter <string>] [--timeout <integer>]	Filter (optional): Literal string to match. Not a regular expression. Timeout (optional): Amount of time to stream log (seconds). Example: (view)# show log realtime network-agent --timeout 20
Display data as it is appended to the appliance log file. show log realtime web [--filter <string>] [--timeout <integer>]	Filter (optional): Literal string to match. Not a regular expression. Timeout (optional): Amount of time to stream log (seconds). Example: (view)# show log realtime web --timeout 20
Configure how and when log files are archived. set log archive --type <system\|audit\|email\| network-agent\|web> --freq <weekly\|monthly\| yearly> --size <integer\|string>	When a log file reaches the specified maximum size (between 10 MB and 200 MB), or at the specified frequency interval, the file is archived and a new log file is started. The type parameter is required, and either the freq or the size parameter is also required. Type: The type of archive (system, audit, email, network-agent, or web). Freq: Specifies a frequency interval (weekly, monthly, or yearly). Size: The default unit of measurement is bytes. To instead use kilobytes or megabytes, append "k" or "m" to the size. For example: (config)# set log archive --size 50m Example: (config)# set log archive --type audit --size 30m
Display log file archiving settings. show log archive --type <system\|audit\|email\|network-agent\|web>	Determine whether log files are being archived, and if so, what criteria are used to determine when older log data is archived and a new log file is started. Type: The log type whose settings will be shown (system, audit, email, network-agent, or web). Example: (view)# show log archive --type system
Zip all log files and save to a remote filestore. save log all --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Example: (config)# save log all --location cli_log
Zip appliance log files and save to a remote filestore. save log app --type <all\|audit\|system> --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Type (required): Type of log file (all, audit, or system). Example: (config)# save log app --type audit --location cli_log
Zip email log files and save to a remote filestore. save log email --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Example: (config)# save log email --location cli_log
Zip proxy log files and save to a remote filestore. save log proxy --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Example: (config)# save log proxy --location cli_log
Zip network agent log files and save to a remote filestore. save log network-agent --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Example: (config)# save log network-agent --location cli_log
Zip web log files and save to a remote filestore. save log web --location <filestore_alias>	Location (required): Remote storage location defined by the "set filestore" command. Example: (config)# save log web --location cli_log