Log files

Operations performed in IBM® QRadar® are recorded in log files for tracking purposes. Log files can help you troubleshoot problems by recording the activities that take place when you work with a product.

The following log files can help you identify and resolve problems when they occur:
  • /var/log/qradar.log
  • /var/log/qradar.error
  • /var/log/qradar-sql.log
  • /opt/tomcat/logs/catalina.log
  • /var/log/qflow.debug

If you want to collect the QRadar log files and review them later, see Collecting log files.