Accessing 'old' logs
-
I hope this isn't too much of a newbie question for you :P
pfSense seemed to crash a couple of hours ago. I restarted the VM that it is running on and everything came back to life which at least got us running again.
What I wanted to do was have a look in the log files to see if I could see a reason for the server to stop responding. When I looked in /var/log it seems that all of the files that are there are new ones created since the server (re)started. Or should I be looking somewhere else for the log files leading up to the crash?
-
On pfSense 2.0.1 and earlier, the log files were always wiped/reset at bootup.
On pfSense 2.0.2 and later, on a full install the logs are kept at bootup.
On NanoBSD, the logs are kept in RAM and would be wiped after each reboot no matter what.
If you need to keep logs indefinitely, setup a syslog server and have pfSense send its logs there.
