Where are Console and Defender Logs stored in Prisma Cloud Compute Edition (Self-Hosted)?

Where are Console and Defender Logs stored in Prisma Cloud Compute Edition (Self-Hosted)?

14285
Created On 01/03/22 12:40 PM - Last Modified 08/22/22 18:20 PM


Question


Where are Console and Defender Logs stored in Prisma Cloud Compute Edition (Self-Hosted)?

Environment


  • Prisma Cloud Compute Edition (Self-Hosted).
  • Content and Defender Logs.


Answer


Console Logs Path : /var/lib/twistlock/log/console.log.
Defender Logs Path : /var/lib/twistlock/log/defender.log.

Screenshot 2022-04-29 at 17.37.07.png

Example of Console Logs:

Screenshot 2022-04-29 at 17.36.45.png

Example of Defender Logs:

Screenshot 2022-04-29 at 17.37.28.png





 


Additional Information


  • To check the logs SSH to the host where the defenders are installed and use "ls -l" command.
  • Console and Defender Logs are written to /var/lib/twistlock/log on the Host that is running the pod.
  • Generally, only the Console will have /var/lib/twistlock mounted to a PV.
  • The Defender will not write to a PV unless the Console and the Defender Pods are running on the same host.
  • If the Console is down, the Defender will continue to write logs to the host running the Defender pod.
  • For more information, Refer: Log Rotation


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MjlCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language