Performing NetScaler SD-WAN Log Analysis

Performing NetScaler SD-WAN Log Analysis

book

Article ID: CTX235453

calendar_today

Updated On:

Description

This article describes the logs description that are captured in a Citrix SD-WAN´s diagnostic data file.

SD-WAN Logs Location

In the SD-WAN version 9.x the logs will be in the following path: <Diagnostic Data file Name>/home/talariuser/log/diag/vw_sts_dir.zip

In the SD-WAN version 10.x the logs will be in the following path:  <Diagnostic Data file Name>/vw_sts_dir.zip

Collecting Diagnostic Data from SD-WAN

In order to collect the diagnostic data from SD-WAN Enterprise or Standard edition please refer to the Citrix article How to Collect Diagnostic Data on NetScaler SD-WAN Appliance

After you create the diagnostic data file, please follow the next steps:

  1. Download the file to your computer.
  2. If its required please upload the diagnostic File to Citrix Insight Services (CIS). For additional information please refer to the following article: How to Upload Data to Citrix Insight Services (CIS)
  3. If you would like to analyze the logs, please uncompress the file. The logs will be in the directory named “vw_sts_dir.zip”.
  4. Based on the issue refer to the following table and look for the relevant log files.

SD-WAN Logs Description

File NameDescription
SDWAN_access.logUser access attempts get logged here.
SDWAN_common. logLogs important information about the state of t2_app. Messages here should not be too chatty.
SDWAN_config_update.logLogs related to the configuration changes
SDWAN_db.logThis is for logging appliance connecting to following databases: config, reports, events, routing.
SDWAN_Diagnostics.logIt contains debug commands that are snapshots of current status of the software/data structures/counters 
SDWAN_dynamic_conduit.logLogs detailing the state of dynamic conduit bring up and tear down
SDWAN_dynamic_virtual_path.logLogs detailing the state of dynamic virtual_path bring up and tear down
SDWAN_events.logLogging from event processing are logged here.
SDWAN_exceptions.logNetScaler SD-WAN software exceptions are logged here.
SDWAN_filetransfer.logLogs related to change management distributing files across the network
SDWAN_firewall.logFirewall and NAT related events
SDWAN_hd.logLogging from hard disk monitoring are logged here.
SDWAN_init.logLogging from process monitor are logged here.
SDWAN_ip_learned.logLogs related to IP learning
SDWAN_management.logThe activities of the management tools are logged here
SDWAN_paths.logVerbose details about what is seen on network paths
SDWAN_routes.logLogs related to route distribution through the Virtual WAN network
SDWAN_security.logLogs related to virtual path encryption and key rotation
SDWAN_snmp_poll.logLogs related to using SNMP to poll logs and counters
SDWAN_traffic_impact.logLogs related to tracking the amount of downtime a configuration change could cause
SDWAN_wd.logLogs related to the state of the watchdog
SDWAN_webconsole.logLogging from the UI code in goes here
SDWAN_hd.logLogging from hard disk monitoring are logged here.
SDWAN_init.logLogging from process monitor are logged here.
SDWAN_ip_learned.logLogs related to IP learning
all_routing_protocols.txtImport and Export filter Route´s counters
archiveIn this directory will exported the previous configuration files
coredump*Directory that contains the main logs related to a memory crash.
current_cfg.txtThe active configuration file name
dynamic_routes.txtSDWAN appliance Routing Table
eth_*.capData captures from all the appliance interfaces
icmp.logTTL expire Errors
Init.logService initialization logs go in this file.
install_azure_services.logInstallation logs in Azure
install_esx_tools.logInstallation logns in VMWare ESX
install_kvm_tools.logInstallation logs in a hypervisor
last_1000_Path_events.txtIt records the physical path congestion and bouncing events 
last_10000_events.txtIt records the last 10 000 events in the SDWAN
ssup_upgrade.logSingle Step Upgrade logs
Top.logLogs the SDWAN procesor´s top command to periodically

Issue/Introduction

This article describes the logs description that are captured in a Citrix SD-WAN´s diagnostic data file.

Additional Information

For additional information please refer to SD-WAN Diagnostic Tool and Monitoring Your Virtual WAN