Results 1 to 5 of 5

Thread: Logging

  1. #1
    Newbie
    Join Date
    Sep 2020
    Posts
    7

    Default Logging

    Is there a single consolidated log that will show information from all applications?
    When troubleshooting a network issue jumping from report to report takes a bunch of time as stuff gets missed.

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,241

    Default

    Reports is a consolidated log, if you're jumping around you're using it poorly.

    Not that I can blame you, that thing is powerful.

    So what are you trying to see? Set conditions for the machine / traffic type you're after at the top and use the tabs down the left to see only stuff from each app impacting that specific set of conditions.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Newbie
    Join Date
    Sep 2020
    Posts
    7

    Default

    When troubleshooting a connection issue I would like to have a single place to look and see the traffic and what was passed/blocked. Right now I am checking each applications reports which does not seem to be the best way to check and leads to sometimes missing something. Is there a better way?

  4. #4
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,878

    Default

    Rather than jumping around application to application, the place to start is the sessions view. Identify the session, and in the details section on the right it will help you identify which additional application report you might need to view.

    Unfortunately, this is harder to do after the fact.
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 16.2 to protect 500Mbits for ~450 residential college students and associated staff and faculty

  5. #5
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,241

    Default

    So you want the tool to read your mind?

    Each app is its own server of sorts with its own rules and conditions. Each one sees everything a little differently. So which one blocked it? That's the question you want to answer?

    Then before you go diving into reports you should have an idea of what the connection is that was blocked. Source address, destination address, protocol, destination port. Feed these things to reports as conditions and it'll crop out all the crap but what you tell it. This includes greying out entire modules that didn't get involved.

    USE YOUR CONDITIONS! Otherwise yeah, you're digging through each and every module's logs trying to figure out which independent thing broke your stuff. And if they weren't independent apps, they'd be useless!

    I suppose there should be a way to make a view of everything... The "log" is a SQL database after all. But man... that'd be a HUGE table.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2