No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

Cannot review the detailed operation from the logbuffer output

Publication Date:  2019-12-30  |   Views:  46  |   Downloads:  0  |   Author:  cWX611640  |   Document ID:  EKB1100043554

Contents

Issue Description

Cannot review the detailed operation from the logbuffer output on NGFW

Handling Process

1. Check the channel number of the logbuffer

<USG6000>display logbuffer

Logging buffer configuration and contents : enabled

Allowed max buffer size : 2048

Actual buffer size : 1024

Channel number : 4 , Channel name : logbuffer  

Dropped messages : 0

Overwritten messages : 0

Current messages : 46

2. Check the enabled log level of channel 4, it’s ‘warning’

[USG6000]display channel

channel number:4, channel name:logbuffer

MODU_ID  NAME  ENABLE LOG_LEVEL     ENABLE TRAP_LEVEL    ENABLE DEBUG_LEVEL

ffff0000  default   Y  warning           N     debugging         N     debugging

3. To review the detailed operation, the log level should be informational.

4. Modify the log level of channel 4:

info-center source default channel 4 log level information

Problem resolved.

[NGFW]display logbuffer

Logging buffer configuration and contents : enabled

Allowed max buffer size : 2048

Actual buffer size : 1024

Channel number : 4 , Channel name : logbuffer

Dropped messages : 0

Overwritten messages : 0

Current messages : 54

Nov 18 2018 13:00:10 NGFW %%01SHELL/6/DISPLAY_CMDRECORD(s)[0]:Recorded display command information. (Task=co0, Ip=**, VpnName=, User=**, AuthenticationMethod="Password", Command="display logbuffer")

Nov 18 2018 13:00:01 NGFW %%01SHELL/5/CMDRECORD(s)[1]:Recorded command information. (Task=co0, Ip=**, VpnName=, User=**, AuthenticationMethod="Password", Command="sysname NGFW")

Root Cause

The log level of channel 4 is warning rather than informational.

Solution

Modify the log level of channel 4:

info-center source default channel 4 log level information