The Log action logs troubleshooting messages.

Troubleshooting messages are typically stored in the QRadar® product log files at /var/log/qradar.error, var/log/qradar.log, and /var/log/qradar.java.debug

The following table shows the parameters for the Log action.

Table 1. Log action parameters
Name Data type Required Notes
type Enumeration Yes

The log type.

Possible values:
  • INFO
  • WARN
message String Yes The message to log.

XML Example

This action writes a DEBUG level log to the QRadar product logs that contain the specified message.

<Log type="DEBUG" message="The value was ${/some_value}." />