Using Nebula’s Event Log and Change Log for Monitoring Network and Quick Troubleshooting
The event log can be used to check a number of events occurring across a network. Nebula Control Center (NCC) has two kinds of built-in logs: Device’s event log and Organization-wide change log. Besides the built-in logs, users can also configure the log path in NCC, sending the event messages directly from Nebula devices to a Syslog server. With these, users can easily navigate the event log and change log, built inside of NCC, and filter out extraneous information for monitoring purposes and troubleshooting.
Nebula Device’s Event log
The user may check the logs to track the events occurring in your network for troubleshooting.Location: (Depends on the product type)
- Security gateway > Monitor > Event log
- Switch > Monitor > Event log
- Access point > Monitor > Event log
log page has two parts: A. Filter/Search
section and B. Result section.
Figure 2: Event log has two parts
A. Filter/Search section:
Search the log with the customized parameters including Device (Switch, AP only), Keyword, Priority (Switch only), Category, Tag (Switch only), and Time.
B. Result section:Display the result to match the filtered parameters the user selected.
The user can export the log to CSV or XML file. (Pro Pack feature)
Organization-wide change log
The user can check and monitor who/when/which site did what configuration change.
Location: Organization-wide > Monitor > Change log
The change log also supports filter/search functions with the specific parameters and the export of the result table to CSV or XML file.
Although we recommend the user to check logs on NCC, we still support a syslog server on our Nebula devices to fulfill other scenarios.
Site-side Syslog server
Location: Site-wide > Configure > General settings > Reporting > Syslog server
After saving the configuration and the configuration status is up to date, you should be able to see the syslog on your syslog server.
Figure 5: The user
can see the events that has occurred to the Switch in the syslog server.