Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=logs-file-lines

Commands for troubleshooting logs

See the commands for troubleshooting log files.

To see the log lines, do as follows:

  1. Sign in to the CLI and enter 5 for Device Management and 3 for Advanced Shell.
  2. To open the log directory, enter the following command: cd /log
  3. Use the commands in the following section.

Commands for troubleshooting logs

Latest entries

See the log file's latest entries: tail –f <logfilename>.log

Example

tail –f ips.log

Note

Press Shift+G to reach the last line of the log file.

Time frame

Specify the time frame: tail –f <logfilename>.log | grep <timeframe>

Example

tail –f ips.log | grep 2025-03-19

  • Apply a keyword search filter: grep <keyword> <logfilename>.log

    Example

    grep error ips.log

  • To see a set of log lines from the top, use one of the following options:

    • less <logfilename>.log
    • less <logfilename>.log | grep <keyword>

    Example

    less ips.log

    less ips.log | grep error

    tail –f ips.log | grep 10.10.10.10

    Note

    Press Enter to see the next set of lines.

Debug a service

  • Start, restart, stop, or debug a service: service <service name>:<start/restart/stop/debug> –ds nosync

    Example

    service ips:debug -ds nosync

  • Check the service status: service -S or service -S | grep <servicename>

More resources