topic Troubleshooting an XSOAR 8 on-prem installation in Cortex XSOAR Discussions

Troubleshooting an XSOAR 8 on-prem installation

Josh_Levine — Fri, 26 Jul 2024 21:37:11 GMT

Hi team,

I wanted to see if there is any way to troubleshoot or view debug output/logs in XSOAR 8 on-prem?

I have not had much luck getting the OVA version fo deploy successfully, let alone completing the install and accessing a functional UI. I am persistently stuck at an NGINX screen trying to access the FQDN, but have no way to look at logs to see what is failing. The "viewer" account doesn't have permission to /var/log files, and I don't see a way to troubleshoot this using the OOB admin account.

Are there any guides for XSOAR 8 on-prem troubleshooting?

Re: Troubleshooting an XSOAR 8 on-prem installation

creddy — Mon, 29 Jul 2024 08:27:45 GMT

Hi @Josh_Levine
Is the On-Prem XSOAR 8 installation successful?
To view the logs, you can go to to Textual user interface.
The interface will be having various options including Log bundle and Logs.
You may refer the article in which you will see Task 7. Install Cortex XSOAR and Item 3 Select Install.

Here it shows how the TUI looks like.
To view the logs, you need to select the View logs option and to generate log bundle select log bundle option.
If you click on log bundle, a log file will be created and the path will be shown from which you can access the logs to continue troubleshooting.

I hope that answers your query on how you can view the logs on XSOAR 8 On-Prem.
Please mark this as answer if it helps to address your concerns.

Regards

Re: Troubleshooting an XSOAR 8 on-prem installation

Josh_Levine — Tue, 30 Jul 2024 19:26:06 GMT

Also, is there a breakdown of what each log file is used for or what data it contains?