IP LOG Shutdown/Reboot

Question

Hello everyone, I have a Sophos Firewall XG 115 V.18, in the GUI, the messages that are written in the appropriate window during Shutdown / Reboot, where are they written in the LOG files? 
 
 Also, which LOG records the IP with which the shutdown / reboot is performed? 
 
 Can I understand instead that it was carried out locally? 
 
 Thanks everyone, have a nice working day. 
 
 Christian F.

emmosophos · Accepted Answer

Hello Christian, 
 Thank you for contacting the Sophos Community. 
 I just updated your other post with the answer, those are under csc.log and you can run the following from the advanced shell or you can enter whatever words you entered in the Window. 
 # grep "shutdown_appliance" csc.log MESSAGE Aug 11 10:26:07 [worker:5297]: {"request":{"method":"opcode","name":" shutdown_appliance ","version":"1.6","type":"json","length":349,"data":{ "___username": "admin", "reason": " Test for Community ", "reboot": "0", "currentlyloggedinuserip": "216.232.xxx.xxx", "___serverip": "172.16.15.254", "APIVersion": "1800.2", "___component": "GUI", "mode": 193, "___meta": { "sessionType": 1 }, "___serverport": 4444, "___serverprotocol": "HTTP", "currentlyloggedinuserid": 3, "transactionid": "963" }}} 
 Regards,

IP LOG Shutdown/Reboot

Top Replies