QRadar log files

Edit online

Use the IBM QRadar log files to help you troubleshoot problems.

You can review the log files for the current session individually or you can collect them to review later.

  1. To help you troubleshoot errors or exceptions, review the following log files.
    • /var/log/qradar.log
    • /var/log/qradar.error
  2. If you require more information, review the following log files:
    • /var/log/qradar-sql.log
    • /opt/tomcat6/logs/catalina.out
    • /var/log/qflow.debug
  3. Review all logs by selecting Admin > System & License Mgmt > Actions > Collect Log Files.