21.5 Downloading Log Files

The General Logging page displays the location of the files that Access Manager Appliance components use for logging system messages. There are some exceptions:

  • Default Auditing File: If you have configured Novell Audit to send events to the default audit file (/var/opt/novell/naudit/logs/auditlog), this file does not appear in the list.

    If you want this file to appear in this list, you must make this file readable by the novlwww user. It is a breach of Novell Audit security for Access Manager code to change the permissions on this file. You must decide whether changing its permissions and displaying the file in this list compromises your security.

    To add this file in the list of files for Administration Console, configure the following:

    • Use commands similar to the following to grant the novlwww user executable permissions to the naudit directories:

      chmod o+rx /var/opt/novell/naudit
      chmod o+rx /var/opt/novell/naudit/logs
    • Use a command similar to the following to grant the novlwww user read access to the auditlog file:

      chmod o+r /var/opt/novell/naudit/logs/auditlog
  • Proxy Service Log Files: If you enable proxy service logging, these files are not available for downloading from this page because there could be potentially hundreds of these files. If this type of logging has been enabled, the directory where they are located is displayed. For more information about this type of logging, see Section 21.4.2, Configuring Logging for a Proxy Service.

To view or download a log file:

  1. Click Auditing > General Logging.

  2. Select one or more log files, click Download, then open it or save it to disk.

    You can use any text editor to view the file.

NOTE:The central location of all log files is /var/opt/novell/nam.

Each Access Manager Appliance component generates multiple log files. The following tables lists these files and the types of messages they contain:

21.5.1 Administration Console Logs

Filename

Description

/var/opt/novell/nam/logs/adminconsole/tomcat/catalina.out

Contains Tomcat errors.

/var/opt/novell/nam/logs/adminconsole/volera/app_sc.0.log

Contains events related to importing devices, device configuration changes, health status changes, statistics reporting, and communication problems.

/var/opt/novell/nam/logs/adminconsole/volera/app_cc.0.log

Contains events related to policy configuration.

/var/opt/novell/nam/logs/adminconsole/volera/platform.0.log

Contains XML events for configuration changes. This log file contains very little useful information for system administrators.

21.5.2 Identity Server Logs

Filename

Description

/var/opt/novell/nam/logs/idp/tomcat/catalina.out

Logging to this file occurs only if you have selected the Echo to Console option from the Identity Servers > Servers > Edit > Auditing and Logging page.

When component logging has been set to info for Applications, it contains entries tracing user authentication and role assignments.

/var/opt/novell/nam/logs/jcc/jcc-0.log.0

Contains the log entries for the server communications module related to interaction of Identity Server with Administration Console, such as imports, certificates, health checks, and configuration.

21.5.3 Access Gateway Appliance and Access Gateway Service Logs

Filename

Description

/var/opt/novell/nam/logs/mag/tomcat/catalina.out

Logging to this file only occurs if you have selected the Echo to Console option from the Identity Servers > Servers > Edit > Auditing and Logging page.

Check this file for entries tracing the evaluation of authorization, identity injection, and form fill policies.

/var/log/novell/reverse/<proxy_service-name>

If logging is enabled on one or more reverse proxies, this directory contains the log files.

A directory is listed for each reverse proxy on which you have enabled logging.

/var/opt/novell/nam/logs/jcc/jcc-0.log.0

Contains the log entries for the server communications module related to interaction of Access Gateway with Administration Console, such as imports, certificates, health checks, and configuration.

/var/opt/novell/nam/logs/mag/apache2/error_log

This directory also contains the Apache generated log files such as the error_log file.

/var/opt/novell/nam/logs/mag/amlogging/ags_error.log

Contains the messages generated for configuration, device imports, health, and statistics. It also contains entries for the policy evaluation processes done by the Gateway Service Manager module.

/var/opt/novell/nam/logs/mag/amlogging/verbose_log

Contains the verbose log entries.