Lighthouse CLI, Serial Port, and REST API logging
Lighthouse offers command line interface (CLI) and REST API logs.
Note: Logging is disabled by default.
When enabled, CLI and REST API logs can be found in /var/log/messages
. All passwords are masked in the logs so that sensitive information is not stored in plain text or leaked.
When you enable logging, you are not required to restart or log out and in again. There are a few caveats:
-
CLI logging only works for interactive (human-controlled) terminals. Commands generated by automated scripts are not logged.
-
Commands such as
ssh
ortelnet
do not produce logs for the commands sent over the connection. -
Requests can be logged for all endpoints, however, only endpoints implemented in Lipy can have responses logged.
Note: These logs are not intended to be used as a definitive record of all commands that have ever been run. A malicious user with full root access can circumvent anything.
For more details, see: https://ftp.opengear.com/download/documentation/api/lighthouse/og-rest-api-specification-v3-7.html.