Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 3626 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to check logs for older emails on XG230

neckbeard

Hi All

On Friday night we had an external email that has been sent to 2 users here.

1 user recieved the email, but the other didnt. Its Monday morning now.

The Log viewer doesnt go back far enough to check the logs.

Can i SSH into the XG230 and do a search to find the email in question? Or is there a better approach

 

Kind Regards



This thread was automatically locked due to age.
Parents
  • 0

    Hi Andy,

    if you enable SSH for the Zone, your client resides in, in Administration -> Device Access, you'll be able to SSH into the XG Firewall using the build in admin account (no LDAP or additional local accounts).

    you'll find the log in question in /log/awarrenmta.log

    you can use grep to search the log, the best would be to search for the timestamp to start.

    if you want to export the log to view it in an graphical editor on your pc you'll need an FTP  or SCP Server in your Network because it is the only way to export the logs at the Moment.

    search for an Portable FTP and use ftpput command to send the log.

    here is a description how to use ftp to transfer logs.

    community.sophos.com/.../how-to-do-a-tcpdump-filedump-and-retrieve-it-by-ftp

Reply
  • 0

    Hi Andy,

    if you enable SSH for the Zone, your client resides in, in Administration -> Device Access, you'll be able to SSH into the XG Firewall using the build in admin account (no LDAP or additional local accounts).

    you'll find the log in question in /log/awarrenmta.log

    you can use grep to search the log, the best would be to search for the timestamp to start.

    if you want to export the log to view it in an graphical editor on your pc you'll need an FTP  or SCP Server in your Network because it is the only way to export the logs at the Moment.

    search for an Portable FTP and use ftpput command to send the log.

    here is a description how to use ftp to transfer logs.

    community.sophos.com/.../how-to-do-a-tcpdump-filedump-and-retrieve-it-by-ftp

Children
No Data