Log Files

When troubleshooting problems with your firewall, it is very likely you have to check the logs available on your system. In the UI of OPNsense, the log files are generally grouped with the settings of the component they belong to. The log files can be found here:

Captive Portal Services ‣ Captive Portal ‣ Log File Events from Captive Portal go here
DHCPv4 Services ‣ DHCPv4 ‣ Log File DHCP events get logged here
Dnsmasq DNS Services ‣ Dnsmasq DNS ‣ Log File The DNSmasq Forwarder logs
HAProxy Services ‣ HAProxy ‣ Log File The logs of the Reverse Proxy
Intrusion Detection Services ‣ Intrusion Detection ‣ Log File Suricata Logs are here
Network Time Services ‣ Network Time ‣ Log File NTP daemon logs
Unbound DNS Services ‣ Unbound DNS ‣ Log File Unbound resolver logs can be found here
Web Proxy Services ‣ Web Proxy ‣ Log File Squid access.log, store.log and cache.log

Note

Log files on file system: /var/log/portalauth.log (clog) /var/log/dhcpd.log (clog) /var/log/dnsmasq.log (clog) /var/log/haproxy.log (clog) /var/log/ntpd.log (clog) /var/log/suricata.log (clog) /var/log/resolver.log (clog) /var/log/squid/access.log (text) /var/log/squid/cache.log (text) /var/log/squid/store.log (text)