Summary
The /var/iwss/log folder is empty even if performance logs are enabled in /var/iwss/intscan.ini as shown below:
[Performance]
# Performance log directory:
performance_log=/var/iwss/log/perf.log
performance_logdir=/var/iwss/log
# Performance log directory:
performance_log=/var/iwss/log/perf.log
performance_logdir=/var/iwss/log
# Whether to turn performance logging on or off
performance_usage=on
performance_usage=on
Details
As shown above, the performance logs are properly activated. However, they are recorded in the database. If you want the performances logs to be written in a text log format, configure the log type in the /etc/iscan/intscan.ini file:
- Log in to IWSVA Linux shell as root.
- Edit the /etc/iscan/intscan.ini by executing the following command:
# vi /etc/iscan/intscan.ini
- Execute "/logtype" command to search for the "logtype" parameter. You will see the following lines:
#how to log: use database or log or both
# 2 - text only (log)
# 1 - both database and log
# 0 - database only
logtype=0The value is “0” by default, which means performance logs are written in the database only.
- Press "i" to modify the value of the parameter. You can change it to “1” if you want logs to be recorded both in the database and as text files.
The parameter discussed in this KB is only for some types of logs such as performance log (perf.log). Most logs (HTTP, FTP, etc.), always have text log files in the /etc/iscan/log folder. If you need more information about log configuration, contact Trend Micro Technical Support.
