Troubleshooting Log Files

The only real unique entity for logging on Cumulus Linux compared to any other Linux distribution is switchd.log, which logs the HAL (hardware abstraction layer) from hardware.

Read this guide on NixCraft to understand how /var/log works.

Log File Descriptions

/var/log/aptInformation from the apt utility. For example, from apt-get install and apt-get remove.
/var/log/audit/*Information stored by the Linux audit daemon, auditd.
/var/log/autoprovisionOutput generated by running the zero touch provisioning script (ZTP).
/var/log/boot.logInformation that the system logs when the switch boots.
/var/log/btmpInformation about failed login attempts. Use the last command to view the btmp file. For example, last -f /var/log/btmp | more
/var/log/cl-system-services.logInformation about system services, such as switchd.
/var/log/crit.logLog messages with a critical severity level.
csmgrd.logISSU errors and information.
/var/log/dpkg.logInformation that the system logs when you install or remove a package with the dpkg command.
/var/log/frr/*Troubleshoots routing (FRR), such as an MD5 or MTU mismatch with OSPF.
ifupdown2Information that the system logs from the network interface manager (ifupdown2).
/var/log/installer/*Information about Cumulus Linux installation.
/var/log/lastlogFormats and prints the contents of the last login log file.
/var/log/lttng-tracesInformation about LTTng sessions.
mstpdSpanning Tree Protocol service errors and information.
/var/log/netqd.logInformation about the NetQ agent.
/var/log/nginxErrors and processed requests in NGINX.
/var/log/nv-cli.logInformation about the NVUE CLI.
/var/log/ntpstatsLogs for network configuration protocol.
/var/log/nvued.logLog file for NVUE.
/var/log/ptmdPrescriptive Topology Manager (PTM) errors and information.
/var/log/switchd.logThe HAL log for Cumulus Linux.
This is specific to Cumulus Linux. The system logs switchd crashes here.
/var/log/syslogThe main system log, which logs everything except auth-related messages.
The primary log; grep this file to see what problem occurred.
/var/log/wtmpLogin records file.