asc log
Use this command to manage system logging.
Syntax
asc log [options]
Option |
Description |
-a, --accept |
A required argument for |
-f, --full |
An optional argument to include all log data, not just recent log data. Only works with |
-h, --help |
Display usage text. |
-l, --level <level> |
Specifies which messages to export to the remote logging servers. Valid values are:
Either the number or the text can be used. |
-m, --message <message> |
Specify the message to use in log files and configuration file change journals for logging related activities. |
-p, --purge |
Delete all system and audit logs. This action cannot be undone. |
-r, --reset |
Stop remote logging and return to local logging. |
-s, --syslog <target> |
Set the remote syslog logging server(s). Either hostname or IP address can be specified. You can configure multiple syslog servers at the same time. |
--targetPort <port_number> |
Specify a target port for TCP-TLS transport. By default, encrypted syslog uses port 6514. Note: You can only specify one port number even if you set multiple encrypted syslog servers. |
-t, --troubleshoot |
Generates a troubleshooting archive of recent log data for diagnostic purposes. Requires the --accept option to acknowledge data sensitivity concerns. Include the --full option to include all log data, not just recent log data. |
-x, --crypto |
Use TLS encryption for outbound logging connections. The remote syslog server(s) must support TLS. TLS certificates for this service are managed using the htCerts.pl utility. |
Examples
Permanently delete all system and audit logs:
asc log -p
Set a remote syslog server and use TLS encryption:
asc log -s logger.company.com -x
Set two remote syslog servers, the log level, and no encryption:
asc log -s log1.company.com -s log2.company.com -l warning
Stop remote logging:
asc log -r
Set the logging level to notice:
asc log -l 5
or
asc log -l notice
Create a troubleshooting file for HyTrust Support diagnostics and include all log data:
asc log -t -f --accept
Create a small troubleshooting file with recent log data only:
asc log -t --accept
Create an encrypted syslog with a specific TCP port number:
asc log -s syslog.company.com --targetport 10514 -x