Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=logs-file-lines

Commands for troubleshooting logs

See the commands for troubleshooting log files.

To see the log lines, do as follows:

  1. Sign in to the CLI and enter 5 for Device Management and 3 for Advanced Shell.
  2. To open the log directory, enter the following command: cd /log
  3. Use the commands in the following section.

Commands for troubleshooting logs

Latest entries

See the log file's latest entries: tail –f <logfilename>.log

Example

tail –f ips.log

Note

Press Shift+G to reach the last line of the log file.

Time frame

Specify the time frame: tail –f <logfilename>.log | grep <timeframe>

Example

tail –f ips.log | grep 2025-03-19

  • Apply a keyword search filter: grep <keyword> <logfilename>.log

    Example

    grep error ips.log

  • To see a set of log lines from the top, use one of the following options:

    • less <logfilename>.log
    • less <logfilename>.log | grep <keyword>

    Example

    less ips.log

    less ips.log | grep error

    tail –f ips.log | grep 10.10.10.10

    Note

    Press Enter to see the next set of lines.

Debug a service

  • Start, restart, stop, or debug a service: service <service name>:<start/restart/stop/debug> –ds nosync

    Example

    service ips:debug -ds nosync

  • Check the service status: service -S or service -S | grep <servicename>

More resources