Log messages and events

Reference list

 
Info

The Log Viewer (Kibana) shows both events and messages mixed in one view allowing filtering and searches.

viewable in Log Viewer

can be alerted

can be forwarded to external syslog

Log Messages

yes

–

yes

Events

yes

yes

yes

 
Example

Example for Kibana searches

The following example is based upon the Kibana dashboard Discover / Logs - All Airlock Logs which is accessible under Log & Report >> Log Viewer.

To filter for Events:

  1. For custom searches:
    Perform a new search i.e. log_id:EVENT_* or a more refined regular expression.
  2. For searches based upon our predefined Kibana templates:
    On the dashboard, click on Open and use the search template Requests - GATEWAY Troubleshooting - Events.

Log messages

System components generate log messages. These messages can be viewed in the Log Viewer (Kibana). Alternatively, log messages may be forwarded to a second Syslog located in the management network.

See also reference list of log fields..

Events

Events are created by rules based on log messages. Events can be alerted, i.e. sent by email, create a web request or to a specific syslog server. The alerting methods can be configured in “Log Settings” - “Event Notification Channels”.

There are two types of events:

  • Airlock Gateway defines internal events. The administrator can't change those events. They may be changed with product updates in the future.
  • Customizable events cover events highly dependent on the Airlock Gateway usage scenario, i.e., the number of requests per second.

See also reference list of events and frequent events.