Alert log?

[killmasta93]

Hi,
I was wondering if someone else has come across this? As on the front page of the pf alert shows an amount when i click it it filters the ID code but shows no alert, Im guessing it only saves the log in the ram around maybe 2-3 hours?

Thank you

[BBcan177]

The Alerts tab reads the data from the pfsense firewall log. So it can only match the IP details that are still in that log file. The next version of the package will have a new filter daemon which will read the firewall log and save the pfBNG alerts to a new log file which will allow for more log data to be saved.

[killmasta93]

Thanks for the reply, that was exacly what i was thinking it was log files from the ram, but really cool cant wait for the update, but the update is for pfSense 2.3.X? only?

Thank you

[BBcan177]

Unless you are using ramdisks, then it's not wiped on reboots. The logs are in /var/log. And you can increase the log size in the log settings menu.

[killmasta93]

Thanks for the reply, as for the filter log I have it max out to 2000 and on the /var/log/filter.log
only get around 3.1k of lines which holds around 2 hours of firewall logs

Thank you