Useful Logs
===========

Both servers
------------

- AppArmor and grsec errors: ``/var/log/kern.log``
- iptables: ``/var/log/syslog``

*Application Server*
--------------------

- Apache: ``/var/log/apache2/*``

If an error is triggered it's in the SecureDrop application logs:
``/var/log/apache2/source-error.log`` and
``/var/log/apache2/journalist-error.log``

*Monitor Server*
----------------

- OSSEC ::

     /var/ossec/logs/ossec.log
     /var/ossec/logs/alerts/alerts.log

- Postfix/Procmail ::

     /var/log/mail.log
     /var/log/procmail.log

Useful Logs
===========

For tips on collecting these logs, see `Admin Guide > Investigating Logs <https://docs.securedrop.org/en/stable/admin.html#investigating-logs>`__

Both servers
------------

- AppArmor and grsec errors: ``/var/log/kern.log``
- iptables: ``/var/log/syslog``

*Application Server*
--------------------

- Apache: ``/var/log/apache2/*``

If an error is triggered it's in the SecureDrop application logs:
``/var/log/apache2/source-error.log`` and
``/var/log/apache2/journalist-error.log``

*Monitor Server*
----------------

- OSSEC ::

     /var/ossec/logs/ossec.log
     /var/ossec/logs/alerts/alerts.log

- Postfix/Procmail ::

     /var/log/mail.log
     /var/log/procmail.log

Add link to Admin Guide on logs page
Add link to Admin Guide on logs page