Configure VPN connection logs for auditing
Posted: Thu Jan 14, 2016 10:18 am
Hello all,
I am very new to OpenVPN. I have been tasked to configure logging for VPN connections for audit purposes.
For instance, User A logs into VPN on 14th Jan 2016.
On 15th Jan (or later) I should be able to view the log file, showing that User A is connected to the VPN on the 14th.
The config I can find is this:
# Output a short status file showing
# current connections, truncated
# and rewritten every minute.
status openvpn-status.log
However, the above would truncate and overwrite the logs every minute.
Question 1:
Is there a way to disable overwriting of connection logs?
Question 2:
# By default, log messages will go to the syslog (or
# on Windows, if running as a service, they will go to
# the "\Program Files\OpenVPN\log" directory).
# Use log or log-append to override this default.
# "log" will truncate the log file on OpenVPN startup,
# while "log-append" will append to it. Use one
# or the other (but not both).
;log openvpn.log
log-append openvpn.log
What are these logs referring to? What is the difference between openvpn.log and openvpn-status.log
Thank you in advance, community.
Rgds,
Johnson
I am very new to OpenVPN. I have been tasked to configure logging for VPN connections for audit purposes.
For instance, User A logs into VPN on 14th Jan 2016.
On 15th Jan (or later) I should be able to view the log file, showing that User A is connected to the VPN on the 14th.
The config I can find is this:
# Output a short status file showing
# current connections, truncated
# and rewritten every minute.
status openvpn-status.log
However, the above would truncate and overwrite the logs every minute.
Question 1:
Is there a way to disable overwriting of connection logs?
Question 2:
# By default, log messages will go to the syslog (or
# on Windows, if running as a service, they will go to
# the "\Program Files\OpenVPN\log" directory).
# Use log or log-append to override this default.
# "log" will truncate the log file on OpenVPN startup,
# while "log-append" will append to it. Use one
# or the other (but not both).
;log openvpn.log
log-append openvpn.log
What are these logs referring to? What is the difference between openvpn.log and openvpn-status.log
Thank you in advance, community.
Rgds,
Johnson