QRadar log files

Use the IBM® QRadar® log files to help you troubleshoot problems.

You can review the log files for the current session individually or you can collect them to review later.

Follow these steps to review the QRadar log files.

1. To help you troubleshoot errors or exceptions, review the following log files.
   • /var/log/qradar.log
   • /var/log/qradar.error
2. If you require more information, review the following log files:
   • /var/log/qradar-sql.log
   • /opt/tomcat6/logs/catalina.out
   • /var/log/qflow.debug
3. Review all logs by selecting Admin > System & License Mgmt > Actions > Collect Log Files.