Self-Tests Log; Configuring Logs Using The Ui; Configuring Logs In The Console (For The Ca, Ocsp, Drm, And Tks) - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Error and access logs are created by the Apache and Tomcat web servers, which are installed with the
Certificate System and provide HTTP services. The error log contains the HTTP error messages the
server has encountered. The access log lists access activity through the HTTP interface.
Apache (TPS and RA)
access_log
error_log
Table 15.4. Logs Created by Apache and Tomcat
These logs are not available or configurable within the Certificate System; they are only configurable
within Apache or Tomcat. See the Apache documentation for information about configuring these logs.

15.2.7. Self-Tests Log

The self-tests log records information obtained during the self-tests run when the server starts or
when the self-tests are manually run. The tests can be viewed by opening this log. This log is not
configurable through the Console. This log can only be configured by changing settings in the CS.cfg
file. The information about logs in this section does not pertain to this log. See
Tests"
for more information about self-tests.

15.3. Configuring Logs Using the UI

Every subsystem but the RA provides an administrative Interface that allows users to configure
logging. For the CA, OCSP, DRM, and TKS, all logs can be configured using the pkiconsole. For the
TPS, only audit logs can be configured using the administrative web services page; other logs must be
configured in the CS.cfg file directly, as in
15.3.1. Configuring Logs in the Console (for the CA, OCSP, DRM,
and TKS)
Logs can be configured through both the subsystem Console and through the subsystem's CS.cfg
file. Specialized logs, such as signed audit logs and custom logs, can also be created through the
Console or configuration file.
NOTE
TPS logs can only be configured through the CS.cfg file because the TPS subsystem
does not have an administrative console.
System, transaction, and audit logs can be configured through the subsystem Console for the CA,
OCSP, TKS, and DRM subsystems. TPS logs are only configured through the configuration file.
1. In the navigation tree of the Configuration tab, select Log.
Tomcat (CA, DRM, OCSP, TKS)
admin.timestamp
catalina.timestamp
catalina.out
host-manager.timestamp
localhost.timestamp
localhost_access_log.timestamp
manager.timestamp
Section 15.4.3, "Configuring TPS
Self-Tests Log
Section 13.10, "Self-
Logging".
367