Lighthouse CLI, Serial Port and REST API logging
Lighthouse offers command line interface (CLI) and REST API logs.
Note:Logging is disabled by default.
Once enabled, CLI and REST API logs can be found in /var/log/messages. All passwords are masked in the logs so that sensitive information is not stored in plain text or leaked.
When you enable logging, you do not need to restart or log out and in again. There are a few caveats:
-
CLI logging only works for interactive (human-controlled) terminals. Commands generated by automated scripts will be not be logged.
-
Commands such as
sshortelnetdo not produce logs for the commands sent over the connection. -
Requests can be logged for all endpoints, however, only endpoints implemented in Lipy can have responses logged.
Note: These logs are not intended to be used as a definitive record of all commands that have ever been run. A malicious user with full root access can circumvent anything.
For more details see:
https://ftp.opengear.com/download/documentation/api/lighthouse/og-rest-api-specification-v3-7.html