OpenVPN Log Analysis

[milad_z13]

Hey Guys, hope y'all are doing well.
I have a problem using pfSense OpenVPN,
Actually, I'm looking for the best solution to monitor my OpenVPN logs, like which user has logged in, which user is currently logged in, session durations, auth failures, cert auth failures, etc.
Has anyone here any ideas abt this?

Looking forward to hearing from you,

Thank you n have a wonderful day.

[Gertjan]

@milad_z13 said in OpenVPN Log Analysis:

Actually, I'm looking for the best solution to monitor my OpenVPN logs, like which user has logged in, which user is currently logged in, session durations, auth failures, cert auth failures, etc.

One of the best solutions is :
Look at the OpenVPN logs : Status > System Logs > OpenVPN.
Reading the lines
And knowing what they mean.

If issues arrive, looking up the solutions, and apply them.
And reloop.

Some of these steps will be needing (a lot of) investigation. Also known as 'learning'.
With time you'll become very fast at doing so.

Btw : this is valid for every log page.

[milad_z13]

@gertjan Thank you for your response, But actually, I'm looking for a third party solution, sth like Splunk but a bit easier and cheaper, Cause products like Splunk are too expensive for implementing in these kinda simple situations,
I don't want to detect any problems, the main reason is security purposes.

Please let me know if you have any ideas abt this situation.

Regards