Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Moving Watchguard Logs
- Thread starter dput
- Start date
- Thread starter
- #4
By default, log files are stored in a subdirectory of the WatchGuard installation directory called \logs. You can change the destination by using a text editor to edit the controld.wgc file.
Open up your favorite text editor. Windows Wordpad works well.
Use the text editor to open the controld.wgc file found in the WatchGuard installation directory. The default location is C:\Program Files\WatchGuard\controld.wgc.
Look for a line reading logdir: logs.
This pathname is relative from the WatchGuard installation directory.
logs represents the destination of log files. You can change this to any directory by entering the complete or relative path name. For example, to change the destination to an archive directory with the subdirectory WGLogs on the D: drive, the syntax is logdir: D:\Archive\WGLogs.
Note: UNC pathnames are not acceptable in this field - if you wish to log to a network path, you must first map the drive on the logging station to a static letter.
Exit the text editor and save your changes.
Be sure to save the file in plaintext, or DOS text. If the file is saved in any other format, the logging service will fail to restart correctly.
Start and restart the WatchGuard Security Event Processor (Formerly LiveSecurity Event Processor).
Right-click the WatchGuard Security Event Processor in the Windows desktop tray. Select Stop Service.
Right-click the icon again and select Start Service.
New log files will be created in the specified directory. You can also move any existing log files from the old location to the new to avoid confusion.
Open up your favorite text editor. Windows Wordpad works well.
Use the text editor to open the controld.wgc file found in the WatchGuard installation directory. The default location is C:\Program Files\WatchGuard\controld.wgc.
Look for a line reading logdir: logs.
This pathname is relative from the WatchGuard installation directory.
logs represents the destination of log files. You can change this to any directory by entering the complete or relative path name. For example, to change the destination to an archive directory with the subdirectory WGLogs on the D: drive, the syntax is logdir: D:\Archive\WGLogs.
Note: UNC pathnames are not acceptable in this field - if you wish to log to a network path, you must first map the drive on the logging station to a static letter.
Exit the text editor and save your changes.
Be sure to save the file in plaintext, or DOS text. If the file is saved in any other format, the logging service will fail to restart correctly.
Start and restart the WatchGuard Security Event Processor (Formerly LiveSecurity Event Processor).
Right-click the WatchGuard Security Event Processor in the Windows desktop tray. Select Stop Service.
Right-click the icon again and select Start Service.
New log files will be created in the specified directory. You can also move any existing log files from the old location to the new to avoid confusion.
- Status
Similar threads
- Locked
- Question
- Locked
- Question