Feedback logging 2.5 snap

kiokoman

2.5.0-DEVELOPMENT (amd64)
built on Fri Sep 06 08:44:36 EDT 2019
FreeBSD 12.0-RELEASE-p10

i will put here what i found, tell me if you want a bug report on redmine

i don't have captive portal but squid log are reported here, the tab's name could be confusing

Advanced Log filter here have wrong name process would be Duration and Pid would be TTY, i understand the form is the same for every tab

if you click on PPPoe Logins / l2TP Logins you are moved to another tab instead of opening the log under

jimp

#1 already has a redmine entry: https://redmine.pfsense.org/issues/1375

#2 is known, not sure if I'll disable filtering for that or fix the search as I'm not certain it works properly.

#3 is on purpose -- those tabs are in both places (at least for now), and the auth tab is just a shortcut to the other.

w0w

@jimp
Is it possible to change GUI Log Entries limit to 10000, now it's 2000?

kiokoman

Status / System Logs / Settings
there is the option
GUI Log Entries

w0w

@kiokoman
It's limited to 2000.

kiokoman

it's not too difficult if you want to modify
/usr/local/www/status_logs_settings.php
and
/usr/local/www/status_logs_common.inc

change from 2000 to what you want
it will slow down the loading of the page with big value

maybe it was a limitation for clog ? but now that we have syslog there is any reason for that?

w0w

Yep, thanks, @kiokoman, sure I can change it, but I think if we already have global changes made by @jimp in logging subsystem, why not fine tune some hidden settings also, I mean officially, by Netgate, not by me.
BTW I've already tried 20000 and it works. Yes it's slower, but it's not critical.

kiokoman

indeed, we should listen to what @jimp think about this, i don't know what impact could that have for small netgate's device
you can always open a request on redmine

w0w

@kiokoman
If user don't touch it, there is no impact by default, but I am not sure why it was limited.

stephenw10

It's limited because for some systems 2000 lines is a huge page. 10000 lines can become unusable.

But it could be limited via an 'are you sure?' style check box or similar I guess. Or just have a warning on the field.

Steve

jimp

I'm fairly sure that limit was a hold-over from the era when ALIX-level devices were more common. I'm not sure what the current limit should be, but 2000 seems small. The default should probably be 250-500 or so these days.

jimp

https://redmine.pfsense.org/issues/9734

jimp

These should hopefully all be addressed by the commits I've pushed today.

kiokoman

Tested it now. good work as always !

i've messed up with squid and there is no log in the captive portal tab.
default line is now 2000
TTY / Duration match the log filter

is there any log about the initialization of pfsense ? i mean the part where the boot process end and pfsense start to configure the interfaces / create route etc etc

kiokoman

Status / System Logs / Settings

Reset Log Files
Clears all local log files and reinitializes them as empty logs. This also restarts the DHCP daemon. Use the Save button first if any setting changes have been made.

Does not work for all the logs,
affected logs still present after pushing reset button:

System -> OS Boot
DHCP
Authentication -> OS User Events
Authentication -> OS Account Changes

individual "clear log" button work as expected

jimp

The DHCP log is definitely cleared, but you might not notice it because the daemon is restarted which immediately puts a bunch of log messages back into the file.

The others are not cleared because they are not maintained by syslog, so that function doesn't catch them. I can add them to the clear function specifically, though.

jimp

https://redmine.pfsense.org/issues/9802

kiokoman

2.5.0-DEVELOPMENT (amd64)
built on Mon Oct 21 20:52:27 EDT 2019

dhcp is logged twice

jimp

On which tab?

jimp

Nevermind, I found the problem and pushed a fix.