How do I get the log files to analyze?

Specific diagnostic logs are stored in the store/docker/volumes/qapp-[id]/log folder.

About this task

The store/docker/volumes/qapp-[id]/log folder contains the following files:
Log file Description
access.log Logs all API calls and their return status.
apiserver.log The main file that logs information and error messages.
nginx_error.log Logs on the Nginx server for QRadar® Pulse.
startup.log Logs messages when it runs the deployment script (install/upgrade) of the app. Also displays the configuration settings.
supervisord.log Logs written by the supervisor that tracks QRadar Pulse processes.
dbMigrations.log Is present only if you upgraded from a QRadar Pulse version older than 2.1.3. It logs when the database is upgraded from a previous version to the installed version.

Procedure

  1. On the Admin tab, click System and License Management.
  2. Select Systems from the Display list, and then select the relevant IBM® QRadar Console or App Host.
  3. Click Actions > Collect Log Files.
  4. On the Log File Collection page, click Advanced Options, and then select the Include Application Extension Logs check box.
  5. Choose the number of days to collect the logs, and click Collect Log Files.
  6. Download the log files when they're ready by clicking the link in the message that displays in the System and License Management page.