3.2.3.3.3. File log viewer

The File log viewer section allows you to visualize the major components events.

../../../../_images/file_log.png


Once you choose an event from the dropdown menu, it will open a view with the following tool bar. Let’s explore it from left to right ->.

../../../../_images/file_log_toolbar.png


  • Events: You can change events from this dropdown menu.

  • Search: The search field allows you to search logs.

  • Filters: It displays a configuration window for your searches.

../../../../_images/file_log_filter.png


  • Pause/Start: By clicking on this icon, you can start or pause automatic log refreshment.

3.2.3.3.3.1. Events

The events available in the File log viewer section are:

  • Admin Portal: Events related to the Administration Portal.

../../../../_images/admin_portal.png


  • API: Product API Rest events. It is an interesting tool for troubleshooting.

../../../../_images/api.png


  • Poleval Audit: To troubleshoot poleval issues. Poleval is an iteration of running the OpenNAC Enterprise policy engine. It means that when an asset is connected to the network, it is subject to every rule of the OpenNAC Enterprise policy that iteration of the rules calls poleval.

../../../../_images/poleval_audit.png


  • Audit: Events generated by users in OpenNAC Enterprise, related to the Administration Portal activities. For example, an event that is generated when an API Key is created through the interface.

../../../../_images/audit.png


  • Captive Portal: Event generated by the captive portal. This portal is shown to end users. Usually related to User Portal Activities, Captive Portal, and Registry Portal. For example, the customizable captive portal workflows events.

../../../../_images/captive_portal.png


  • Jobs: Asynchronous tasks are sent to the queues and workers use these queues to carry out tasks. For example, events related to plugins.

../../../../_images/workers.png


  • HTTPD Access: OpenNAC Enterprise includes a Web Server that publishes different components (API, Captive Portal, Administration portal), these events show access to the HTTP server.

../../../../_images/httpd_access.png


  • HTTPD Error: These events show the error generated by the HTTP server. For example error events regarding a worker and its queues.

../../../../_images/httpd_error.png


  • PHP-FPM Error: These events show the error generated by the php-fpm service.

../../../../_images/php_fpm_error.png


  • Radius: These events are related to RADIUS. For example, events from an user authentication.

../../../../_images/radius.png


  • Poleval: Log entries related to policy evaluations.

../../../../_images/poleval.png


  • Messages: Log entries related to error messages.

../../../../_images/messages.png


3.2.3.3.3.2. View logs by SSH

You can also SSH into the Core and use the command tail -f.

ls -l /var/log/opennac/*.log
../../../../_images/logs_files.png


For example, to see the Admin Portal logs:

tail -f /var/log/opennac/opennac-admonportal.log
../../../../_images/file_log_viewer_admin_portal_ssh.png


Or the Worker’s logs:

tail -f /var/log/opennac/opennac-job.log
../../../../_images/file_log_viewer_workers_ssh.png


Repeat this commands with the desired file to troubleshoot your specific issue.