Log File Details

Administrators use JSA Risk Manager log files to view user activity and to troubleshoot system issues.

The following table describes the location and content of JSA Risk Manager log files.

Table 1: JSA Risk Manager Log Files

Log file name	Location	Description
`audit.log`	`/var/log/audit/`	Contains the current audit information.
`audit.<1-50>.gz`	`/var/log/audit/`	Contains archived audit information. When the `audit.log` file reaches 200 MB in size, it is compressed and renamed to `audit.1.gz`. The file number increments each time a log file is archived. JSA Risk Manager can store up to 50 archived log files.
`qradar.log`	`/var/log/`	Contains all process information that is logged by the JSA Risk Manager server.
`qradar.error`	`/var/log/`	All exceptions and `System.out` and `System.err` messages that are generated by the JSA Risk Manager server are logged in this file.