show log

Description

Use the show log command to view event log contents.

Syntax

show log

show log alert
show log alert continuous
show log alert files [<file number>]
show log alert files <file number> [matching <regular expression>]
show log alert matching <regular expression>

show log continuous [matching <regular expression>]
show log continuous not matching <regular expression>

show log files [<file number>]
show log files <file number> matching <regular expression>
show log files <file number> not matching <regular expression>

show log matching <regular expression>
show log not matching <regular expression>

Arguments

alert	Displays alert event logs.
continuous	Displays new log messages as they arrive.
files	Displays a listing of all available archived log files.
files <file number>	Specifies which archived log file number to display.
matching <regular expression>	Displays event logs that match a given regular expression. If the expression includes spaces, use quotation marks to enclose the expression.
not matching <regular expression>	Displays event logs that do not match a given regular expression. If the expression includes spaces, use quotation marks to enclose the expression.

Defaults

n	Without arguments, the command, show log, displays the current event log in a scrollable pager.

n	The command, show log alert, displays the current alerts log in a scrollable pager.

n	The appliance keeps up to 30 archived alert log files. The older the file, the higher the file number. The newest file has no number, and the most recent archived file is numbered, “1”.

Command Mode

Privileged EXEC Mode

Global Configuration Mode

See Also

None.

Usage Guidelines

To see what archived logs are available, use one of the following:

(config) # show log files ?

(config) # show log alert files ?

Examples

n	To show a list of all available alert log files:

Tallinn (config) # show log files

1

2

Tallinn (config) #

 

 

 

n	To show all archived files that match the expression, “ping”, in any string:

Tallinn (config) # show log matching ping

 

r dumping

Jun 17 17:24:45 localhost rename_ifs: Mapping MAC: 00:0C:BD:00:7F:4A to interface name: wan0

Jun 17 17:24:45 localhost rename_ifs: Mapping MAC: 00:0C:BD:00:7F:4B to interface name: lan0

Jun 17 17:24:45 localhost rename_ifs: Mapping MAC: 00:E0:81:2F:85:98 to interface name: mgmt0

Jun 17 17:24:45 localhost rename_ifs: Mapping MAC: 00:E0:81:2F:85:99 to interface name: mgmt1

Jun 17 17:25:09 Tallinn sysd[798]: TID 1084225888: [sysd.NOTICE]: WDOG: Gateway datapath ping test disabled when in BYPASS.

Jun 17 17:28:09 Tallinn sysd[798]: TID 1084225888: [sysd.ERR]: WDOG: Gateway datapath ping test FAILED: 2

Jun 17 17:29:09 Tallinn sysd[798]: TID 1084225888: [sysd.ERR]: WDOG: Gateway datapath ping test FAILED: 2

Jun 17 17:30:09 Tallinn sysd[798]: TID 1084225888: [sysd.ERR]: WDOG: Gateway datapath ping test FAILED: 2

Jun 17 17:33:09 Tallinn sysd[798]: TID 1084225888: [sysd.ERR]: WDOG: Gateway datapath ping test FAILED: 2

Jun 17 17:34:09 Tallinn sysd[798]: TID 1084225888: [sysd.ERR]: WDOG: Gateway datapath ping test FAILED: 2

Jun 17 17:34:24 Tallinn cli[2411]: [cli.NOTICE]: user admin: Executing command:

show log matching ping

/tmp/messages_filtered-rvzGgG lines 39947-39958/39958 (END)

 

 

n	To view new alert log messages as they arrive:

Tallinn (config) # show log continuous

 

n	To view the #3 archived alert log file:

(config) # show log alert files 3

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.