Configure Logging Settings for Your WatchGuard Servers

With the release of Fireware v12.8, WatchGuard announced the deprecation of the WatchGuard Log Server, Report Server, and Quarantine Server. WSM still includes these server components, but they are no longer supported in v12.9 and higher. We will remove them in a future WSM release.

On the WatchGuard Server Center Logging pages for the Management Server, Report Server, and Quarantine Server, you can configure where each server sends log message data. You can choose to send log messages to WatchGuard Dimension, Windows Event Viewer, and a log file.

  1. In the Servers tree, select the server you want to configure.
  2. Select the Logging tab.
    The Logging page appears.

Screen shot of the WatchGuard Servers Logging page

  1. Configure the settings for your server, as described in the next sections.
  2. When you are finished, click Apply to save your changes.

Configure Logging to a WatchGuard Log Server (Dimension)

You can send log messages from your servers to one or more instances of WatchGuard Dimension. When you add more than one Dimension instance, you can use the server priority list to select the order in which your server connects to each Dimension instance. If it cannot connect to the Dimension instance with the highest priority (Priority 1), it connects to the next one in the list. If the server examines each instance of Dimension in the list and cannot connect, it tries to connect to the first selection in the list again.

To enable logging:

  1. In the WatchGuard Log Server section, select the Send log messages to WatchGuard Log Server(s) check box.
  2. Click Add and add a server to the list.
    The Add Log Server dialog box appears.
  3. In the Log Server Address text box, type the IP address or fully qualified domain name (FQDN) of the Dimension server.
    DNS must be enabled to use an FQDN for a Dimension server address.
  4. In the Authentication Key and Confirm Key text boxes, type the authentication key for the Dimension server.
  5. Click OK.
    The instance of Dimension appears in the list.
  6. To add another server, repeat Steps 2–5.
  7. To change information for a server, select a server from the list and click Edit.
  8. To change the priority of the servers in the list, select a server and click Up or Down.
    The selected server moves up or down in the Priority list.
  9. To delete a server from the list, select the server and click Remove.
  10. From the Select a log level drop-down list, select the level that is assigned to log messages:
    • Error
    • Warning
    • Information
    • Debug

For more information about log levels, go to Log Message Levels.

To disable logging to any Dimension servers, clear the Send log messages to WatchGuard Log Server(s) check box.

Configure Logging to Windows Event Viewer

You can choose to send log messages to the Windows Event Viewer.

  1. In the Windows Event Viewer section, select the Send log messages to Windows Event Viewer check box.
  2. From the Select a log level drop-down list, select the level that is assigned to the log messages:
    • Error
    • Warning
    • Information
    • Debug

For more information about log levels, go to Log Message Levels.

Save Log Messages in a Log File

You can choose to save log messages to a file that you can access later. This option is enabled by default.

To change the log file settings:

  1. To save log messages in a file, make sure the Send log messages to a file check box is selected.
  2. Click Browse and select the directory where the log file is stored.
  3. From the Select a log level drop-down list, select the level that is assigned to log messages:
    • Error
    • Warning
    • Information
    • Debug

For more information about log levels, go to Log Message Levels.

Related Topics

Install and Set Up the WatchGuard Management Server

About the Report Server

About the Quarantine Server