Contents of syslog messages about system events of the application

System events of the application contain information about the state of cluster nodes, application modules, and the license.

Each syslog message for events of all types contains the following fields defined by the parameters of the Syslog protocol in the operating system:

date and time of the event;
name of the host where the event happened;
name of the application (the value is always KWTS).

Example:

Jan 5 03:39:01 hostname KWTS: Anti-Phishing bases applied: publishing-time="2019-01-05T03:08:00"

The following table lists the contents of syslog messages corresponding to each type of system event.

Content of syslog messages corresponding to system event types

Event type	Event description	Message
Application started/stopped	Application started	`audit started`
Application started/stopped	Application stopped	`audit stopped`
Anti-Virus module database update	Database loading error	`Anti-Virus bases loading error: <error cause>`
	Database update error	`Anti-Virus bases update error: <error cause>`
	Databases successfully loaded	`Anti-Virus bases applied: publishing-time="<date and time of loading>", record-count=<number of records>`
	Databases successfully updated	`Anti-Virus bases updated`
Anti-Phishing module database update	Database loading error	`Anti-Phishing bases loading error: <error cause>`
	Database update error	`Anti-Phishing bases update error: <error cause>`
	Databases successfully loaded	`Anti-Phishing bases applied: publishing-time="<date and time of loading>", record-count=<number of records>`
	Databases successfully updated	`Anti-Phishing bases updated`
Licensing	License has expired.	`license key expired: license-id="<license serial number>" functionalityLevel="Full functionality" expiration-date="<license expiration date and time>"`
	License error	`license error: <error description>`
	License key is blacklisted	`license is blacklisted: license-id="<license serial number>" functionalityLevel="Full functionality"`
	Activation code blocked before application activation	`activation code cannot be installed as it is blocked`
	License is missing	`no license`
	Activation code successfully added	`license installed: license-id="<license serial number>" functionalityLevel="Full functionality"`
	License key status successfully updated	`license updated: license-id="<license serial number>" functionalityLevel="Full functionality"`
	Activation code successfully deleted	`license removed: license-id="<license serial number>" functionalityLevel="Full functionality"`
	License expires soon	`license expires soon: license-id="<license serial number>" functionalityLevel="Full functionality" days-left=<number of days remaining>`
	License grace period is active	`license grace period: license-id="<license serial number>" functionalityLevel="Full functionality" days-left=<number of days remaining>`
	License is valid	`license is ok: license-id="<license serial number>" functionalityLevel="Full functionality"`
Processes	The application process has crashed (in case of multiple crashes, the message specifies the number of crashes and the period in which they occurred)	`<process name> crashed [<number of crashes> times during last <number of minutes> minutes]`
Processes	The application process was restarted (in case of multiple restarts of the process, the message specifies the number of restarts and the period in which they occurred)	`<process name> restarted [<number of restarts> times during last <number of minutes> minutes]`

Page top