Log Files
Robo-FTP Server generates several log files that can you use to audit server access and troubleshoot any issues you may encounter:
•The FTP Log File shows user log-in attempts, commands executed, and server-related information for the FTP and HTTP servers.
•The SFTP Log File shows user log-in attempts, commands executed, and server-related information for the SFTP server.
•The Script Log File lists commands executed as part of Server Event scripts and any status messages returned.
•The Trace Log File records Server Event script-related protocol trace and diagnostic messages (for example, when logging into a remote SFTP server or sending an email).
The Script and Trace Logs can be enabled by checking their corresponding checkboxes under the Support tab. We recommend that you enable these logs when using Server Event scripts. This will usually allow you to successfully determine the cause of script-level errors, should they occur.
Logging Options
When the Log events for Server checkbox is enabled, a log line will be added to the FTP Log File or SFTP Log File (as appropriate) indicating each time that a particular event with a preassigned Server Event script is triggered. The contents of the Script and Trace logs themselves are not affected by this option.
When the Resolve IP addresses into host name checkbox is checked, a reverse DNS lookup is performed on the IP address of each connecting client. Both the IP address and its corresponding host name will be recorded in the FTP or SFTP Log.
Enabling the Log raw client messages checkbox will cause Robo-FTP Server to log low-level, protocol-specific commands, such as the raw FTP commands STOR, RETR, and LIST. This can be highly effective at troubleshooting issues with problematic clients but comes with the price of greatly increasing the size of the log files.
Log Rotation
The rate at which backup logs turn over, as well as the size of each individual log can also be controlled under Log Rotation. Here, you can specify whether
logs rotate at the beginning of each calendar day, or after reaching a particular file size. The maximum number of backups can also be configured here. Once that
maximum has been exceeded, the oldest log will be automatically deleted.
Event Format:
Events are displayed within each log file using the following formats:
Log On Begin:
banned: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: {IP_OR_HOSTNAME}: IP Banned"
partially authenticated: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: partially authenticated"
password-login success: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Robo-FTP Server password authentication succeeded"
sshkey-login attempt: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Allowed Key: {PUBLIC_SSH_KEY}"
sshkey-login success: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Key authentication succeeded"
log-on denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: logon denied"
Log On Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Connection attached to session: connection count now {CONNECTION_COUNT}"
Note: CONNECTION_COUNT is never greater than one except for HTTP/HTTPS sessions.
Log Off:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Session logged off"
Download Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Downloading {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Downloading {PATH} ({RESOLVED_PATH}) Permission Denied"
Download Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed download {PATH} ({RESOLVED_PATH})"
Upload Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Uploading {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Uploading {PATH} ({RESOLVED_PATH}) Permission Denied"
Upload Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed upload {PATH} ({RESOLVED_PATH})"
Change Directory Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Change Directory {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Change Directory {PATH} ({RESOLVED_PATH}) Permission Denied"
Change Directory Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed changdir {PATH} ({RESOLVED_PATH})"
List Lirectory Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Listing {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Listing {PATH} ({RESOLVED_PATH}) Permission Denied"
List Lirectory Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed listing {PATH} ({RESOLVED_PATH})"
Delete Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Deleting File {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Deleting File {PATH} ({RESOLVED_PATH}) Permission Denied"
Delete Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed Delete {PATH} ({RESOLVED_PATH})"
Rename Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Renaming {PATH} ({RESOLVED_PATH}) to {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Renaming {PATH} ({RESOLVED_PATH}) to {PATH} ({RESOLVED_PATH}) Permission Denied"
Rename Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed Rename {PATH} ({RESOLVED_PATH})"
HTTP-POST Begin:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Posting to {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Posting to {PATH} ({RESOLVED_PATH}) Permission Denied"
HTTP-POST Reply:
Allowed: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Post Received to {PATH} ({RESOLVED_PATH})"
Denied: "{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Post Received to {PATH} ({RESOLVED_PATH}) Permission Denied"
HTTP-POST Complete:
"{DATE} {TIME} {IP_OR_HOSTNAME} {PROTOCOL} {USERNAME}: Completed Post {PATH} ({RESOLVED_PATH})"
Available values for PROTOCOL are as follows: "FTP", "FTPS", "HTTP", "HTTPS", and "SSH/SFTP".
See also: Debug Logging, Server Console Logging Tab, Server Event Scripts