RSA DLP Network - How to locate operational logs
2 years ago
Originally Published: 2015-09-25
Article Number
000067057
Applies To

RSA Product Set: DLP
RSA Product/Service Type: DLP Network
RSA Version/Condition: 9.6
Platform: Centos
RSA Product Set: DLP
RSA Product/Service Type: DLP Network
RSA Version/Condition: 9.6
Platform: Centos

Issue
How to locate the operational logs related to "RSA DLP" network components from the appliances. 
Tasks
1- SSH to the appliance.
2- Select "6" Advanced options. 
3- Select "1"  Exit to shell. 
4- For Network Controller, the logs will be located under the path:
  • cd  /opt/rsa/controller/log
  • cd  /opt/tablus/controller/log
6- For ICAP, Interceptor & Sensor, the logs will be located under the path: 
  • cd  /opt/rsa/sensor/log
  • cd  /opt/tablus/sensor/log
7- Type "ls" command in order to view the logs files under log directory. 
8- Use any of the linux-related file-view commands to view contents of the file
    
        [example:
cat/tail/head "messages-0000000001.log].