Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [SOLVED] PFSense stopped logging

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 5 Posters 6.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B Offline
      bplein
      last edited by

      I've had the same problem. Going to try and piz0t's "kick it in the pants" test

      1 Reply Last reply Reply Quote 0
      • B Offline
        bplein
        last edited by

        Didn't seem to help mine.

        /var/logs seems to have stopped for most of the logs (the only logs that show up in the UI are the filter logs, and those appear "normal" here.

        Note that all of those 500k files that last updated on 2/4 (when I cleared logs) are all binary files, no user readable text.

        [2.2-RELEASE][root@pfatom.home.plein.org]/var/log: ls -lahrt
        total 9606
        -rw-------   1 root  wheel    40K May 12  2014 installer.log
        drwxr-xr-x   2 root  wheel   512B May 12  2014 ntp
        -rw-r--r--   1 root  wheel    28B Oct 20 08:58 lastlog
        drwxr-xr-x  28 root  wheel   512B Jan 23 23:46 ..
        drwxr-xr-x   3 root  wheel   1.0K Jan 24 17:43 .
        -rw-------   1 root  wheel   5.1K Jan 24 18:02 pflog
        -rw-------   1 root  wheel    10K Jan 24 18:02 spamd.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 wireless.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 vpn.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 system.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 routing.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 resolver.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 relayd.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 pptps.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 ppp.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 portalauth.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 poes.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 openvpn.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 ntpd.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 lighttpd.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 l2tps.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 ipsec.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 gateways.log
        -rw-------   1 root  wheel   500K Feb  4 23:56 dhcpd.log
        -rw-r--r--   1 root  wheel   7.1K Feb  5 21:14 dmesg.boot
        -rw-------   1 root  wheel    23K Feb  5 21:14 userlog
        -rw-------   1 root  wheel   1.1K Feb  5 22:36 utx.log
        -rw-r--r--   1 root  wheel   394B Feb  5 22:36 utx.lastlogin
        -rw-------   1 root  wheel   500K Feb  5 22:38 filter.log
        
        
        1 Reply Last reply Reply Quote 0
        • D Offline
          doktornotor Banned
          last edited by

          @bplein:

          Note that all of those 500k files that last updated on 2/4 (when I cleared logs) are all binary files, no user readable text.

          That is NOT a bug. https://doc.pfsense.org/index.php/Why_can%27t_I_view_view_log_files_with_cat/grep/etc%3F_(clog)

          1 Reply Last reply Reply Quote 0
          • F Offline
            firewalluser
            last edited by

            @piz0t:

            I just noticed the same problem on 2.2 release and came to the forums to get help.

            My last log was on Jan 31, 5 days ago.  I now went to the log settings page and turned off "Show log entries in reverse order (newest entries on top)", saved, and then turned it back on, and now the logging is working again.  It looks like the logging service must have died for some reason on Jan 31 and never restarted itself or warned me about the problem.

            I run my logs in reverse, might be worth switching this back to the default reverse order to see if theres any change.

            @doktornotor:

            @bplein:

            Note that all of those 500k files that last updated on 2/4 (when I cleared logs) are all binary files, no user readable text.

            That is NOT a bug. https://doc.pfsense.org/index.php/Why_can%27t_I_view_view_log_files_with_cat/grep/etc%3F_(clog)

            There is currently no text in this page. You can search for this page title in other pages, or search the related logs, but you do not have permission to create this page.

            Theres nothing on that page, has the text been pulled?

            Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

            Asch Conformity, mainly the blind leading the blind.

            1 Reply Last reply Reply Quote 0
            • D Offline
              doktornotor Banned
              last edited by

              The page is just fine, the forum sucks…

              1 Reply Last reply Reply Quote 0
              • B Offline
                bplein
                last edited by

                OK, I understand that you can't just cat the files now.

                But the files are still empty. THAT's a bug.

                1 Reply Last reply Reply Quote 0
                • T Offline
                  thafener
                  last edited by

                  Hi @ll

                  Well for my case I found out what has happened… my trainee has moved the logs from the PFSense box instead
                  of copying  :o

                  Moved the files back meanwhile but the logs don't refresh, is there any way to repair this ?

                  KInd regards

                  thafener

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    doktornotor Banned
                    last edited by

                    Forget about it and reset the logs.

                    1 Reply Last reply Reply Quote 0
                    • T Offline
                      thafener
                      last edited by

                      Thank you cool, works again :)

                      1 Reply Last reply Reply Quote 0
                      • J Offline
                        Jeremy11one
                        last edited by

                        Update:

                        It's been about a week and my logs are still working.  Cycling the "Show log entries in reverse order (newest entries on top)" setting got my logs working again.  To be extra sure though, an hour after that, I also clicked the "Reset Log Files" button.  I don't know if that made any difference, but at least my logs are still working.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.