I have set logging to high.
I am not seeing any log messages.
I do see the empty ufw.log file.
No messages in dmesg
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It only takes a minute to sign up.Sign up to join this community
The log files are in:
To get a list of UFW related logs run the following at the command line:
Your results should appear like this:
~$ ls /var/log/ufw* /var/log/ufw.log /var/log/ufw.log.2.gz /var/log/ufw.log.4.gz /var/log/ufw.log.1 /var/log/ufw.log.3.gz
If you do not have logs there you may want to double check the status and settings for UFW.
sudo ufw status verbose
You should get a result like this:
~$ sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (outgoing) New profiles: skip
If logging is off then you need to turn it on by running the following command:
sudo ufw logging low
If you do not have any log files then you can check to see if rsyslogd is running by typing:
sudo service rsyslog status
You should get a result as follows:
~$ sudo service rsyslog status rsyslog start/running, process 991
If it does not show that it is running you can try to start the service:
sudo service rsyslog restart
last time i checked the log file for ufw it was in the
folder, with a lot of other files
Just to add to @cprofitt's answer, I had an issue where UFW was showing:
sudo ufw status verbose Status: active Logging: on (low)
But it was not logging. I went through several gyrations, including disable/re-enabling ufw. Checking rsyslog conf, restarting rsyslog. All without any positive results. Still nothing going to the logfile.
I did a
sudo ufw logging low and logs started growing once again. So ufw was obviously in some state where it would not write to the logs.
I deleted the empty /var/log/ufw.log file, restarted and ufw began logging.