Log Rotation and Deletion

Follow

Chris Hewitt

• August 18, 2020 20:43
• Edited

How long (chronologically) are logs maintained before being deleted? Are there size limits to log retention?

If logs are deleted, can you share which and where logs are checked and deleted please? I am looking to off-load logs prior to deletion and want to know where to insert my code change.

I have a client where I am thinking about installing a Gold but they have a requirement to retain all logs for seven years.

Thanks

0

• 

  Firewalla

  • August 18, 2020 23:51

  You should not use any debug logs from the unit for production.  They are there for developer use only.

  Here is the reason why, these logs are there to help developers find problems, so they are unorganized, ugly, unstructured, and only use is to find bugs.   There is no guarantee the log format will be the same or even the log content will be the same between versions.  There is no guarantee these logs will be even correct... (as lazy developers sometimes will leave stuff there for absolutely no reason).

  We do have a work item to provide some type of structure to logs... but that work item is sort of on a pause, since not many people are asking for them, and to maintain the logs will take too much time. 

   

  0

  Comment actions Permalink
• 

  Chris Hewitt

  • August 19, 2020 01:46

  Sorry I wasn't more clear.

  I am talking about the network traffic and packet logs. The thought is to use historical traffic for future forensic needs.

  Where are historical traffic logs maintained?

  0

  Comment actions Permalink
• 

  Firewalla

  • August 20, 2020 04:40

  The traditional logs you are asking need a bit of work to extract, the system we build was never meant to export those things.  I assume you want to support this feature, we will add your name on the ++ list. 

  2

  Comment actions Permalink
• 

  Firewalla

  • August 21, 2020 01:24

  Everything is on the box

  Give us a month or two to stabilize and make all the Gold users happy first.  We may start a program to get developers outside of us to help us

  3

  Comment actions Permalink
• 

  Chris Hewitt

  • August 21, 2020 02:04

  I’m a patient man. Go continue making something great.

  1

  Comment actions Permalink
• 

  Anders Ripa

  • August 21, 2020 11:03

  I also interested in saving log files (off-device).

  Also interested in syslog support to get the log items of the device in near real time.

  2

  Comment actions Permalink
• 

  Chris Hewitt

  • August 24, 2020 19:14
  • Edited

  @Andres

  
  You could always write a script to scp out the logs and run it as a cronjob.

  I’ve got someone writing up an approach to save to “any” cloud provider. I’ll post it shortly.

  Better but a bit more complicated would be to use a sshfs client over ssh. Secure shell file system which enables mounting of a remote system and interact with it like it’s a local folder. You can add sshfs mappings to fstab. 

  1

  Comment actions Permalink
• 

  Martins

  • August 27, 2020 19:53

  Would be awesome to plug a USB memory on one of the USB ports on the Gold, and save all the logs in the USB stick or something like that !

  2

  Comment actions Permalink
• 

  Chris Hewitt

  • August 27, 2020 21:50

  @Rodrigo that’s a snap. Want me to write up how? Did you see my post on saving to the cloud?

  1

  Comment actions Permalink
• 

  Chris Hewitt

  • August 28, 2020 15:06

  @Rodrigo check out this post I just made.
  
  https://help.firewalla.com/hc/en-us/community/posts/360049436094-Using-an-Externally-connected-USB-Memory-Stick

  1

  Comment actions Permalink
• 

  Martins

  • August 28, 2020 15:09

  Thanks Chris ! It's all I need for now ! You did a good job there !

  1

  Comment actions Permalink

Please sign in to leave a comment.