access to audit logs

[maxilee]

hi.
how can we access audit logs without web GUI ? or how can I send this audit logs to syslog ( local or remote ) or write to file ?

 

[Carles Munyoz]

Hi,
You can access all the audit logs by means of this icon in the after login screen:

For the audit logs of a concrete FWCloud:

And for the audit logs for a firewall or cluster:


Greetings.

 

[maxilee]

I know that.
but i'm asking without web GUI
API ?
any script ?

 

[Carles Munyoz]

Ok, sorry me.
You can see them in the fwcloud-api logs in the directory: /opt/fwcloud/api/logs

 

[maxilee]

I'v already checked these logs.

-rw-r--r--.  1 fwcloud fwcloud 46178478 Jul 16 15:55 app.log
-rw-r--r--.  1 fwcloud fwcloud  8895257 Jul 16 15:52 http.log
-rw-r--r--.  1 fwcloud fwcloud        0 Nov  4  2024 query.log

but they doesn't contain audit logs which I can see via web UI.
in web UI I can see which user made anych changes, installed firewall etc ...

maybe I'v not enabled something.

I know that audit logs exists in database

MariaDB [fwcloud]> select * from audit_logs;

[cut]

 

[Carles Munyoz]

I'm sorry but at this moment such logs are only available in the fwcloud-ui or in the database.