Configure the server log for maximum size, log level, number of files to backup and days to retain log files, in Cortex SXSOAR.
You can configure the log level, the number of backups, the number of days to retain log files, and the maximum size of the server log.
By default, the log level of the server log is Info. The following are the log level options:
Fatal - indicates truly catastrophic situations. Not usually used.
Error - provides information about a serious issue that represents the failure of something important in the application.
Warning - indicates that there might be a problem.
Info - displays normal application behavior and milestones.
Debug - provides detailed diagnostic information. Debug causes the system to write many logs about the operational outcome of several procedural processes and subprocesses. The debug level is resource intensive. You should set the log level to debug only on advice from the technical support, customer success teams, or problem-specific documentation.
Trace - extremely detailed information. Not often used.
You can configure the log level of the server log in the UI or in the /etc/demisto.conf file. If you configure the log level in the UI, you can only select the following log levels: Warning, Info, Debug.
The maximum size of the server log is 20 MB by default. Although you can change this value, it is recommended not to exceed 20 MB. When the server log is full, it is saved as a backup and a new server log is created. The default number of backup files is 3.
To configure the log level of your server log:
In the UI, go to → → and select the log level from the Log Level drop down list.
In the
/etc/demisto.conffile, add the keylog.leveland the new log level.
To configure the maximum size of the log file, the number of files to retain, and the number of days to retain log files:
In the UI, go to → → .
Add the following keys with their new value: log.rolling.backups, log.rolling.maxfilesize.
Key
Value
log.rolling.maxfilesizeThe maximum size in MB to retain log files based. Default is 20 MB.
log.rolling.backupsThe maximum number of log files to retain. Default is 3.
log.rolling.maxageThe maximum number of days to retain old log files based on the time stamp encoded in the file name. Default is 0 (not to retain old log files based on age).
Note
A day is defined as 24 hours and may not exactly correspond to calendar days due to daylight savings, leap seconds, etc.
When changing the configuration settings, bear in mind your available disk space. Increasing the values, may have an adverse impact.