Logs for Troubleshooting
The Qualys support team collects the appliance logs for debugging purposes that are needed for troubleshooting. The logs only contain metadata for the appliance.
The data can be collected only if you have selected Enable Qualys to collect support logs for troubleshooting in the General settings of the Sensor details page.
The log data is collected from Appliance logs and Database available in the appliance.
Appliance Logs
Appliance logs are available in Live Logs or Recent Log File.
To view the appliance logs, log in to your ESXi Server.
- Select the scanner from Virtual Machines and then navigate to the Console > Open browser console.
- From Configuration > Diagnostic > Appliance Diagnostics > Display Log File.
- Choose your Live logs or Recent Logs.
Database
The database on the appliance contains:
-
Asset meta-data such as MAC address, host names, IP ranges that the user configures as internal assets, attributes from protocols used for detection of OS, and the device of the asset.
You can view the same information on CSAM/GAV application.
To view this information:
1. Navigate to CSAM/GAV application > Invetory tab > Assets.
2. In the Search query, type
tags.name:"Passive sensor"
to search the assets with tag name passive sensor.3. Select the asset from the list and from Quick Actions menu, select View Details.
4. Go to System Information tab > View Raw Discovery Data.
-
Output of utilities useful for observing the system resources
-
Sensor-specific configuration setup by the user
-
History of the appliance package upgrades
-
Crash dumps of appliance modules
-
Internal booking tables
-
Kernel logs