Skip to the content
Documentation
Help Start
Reading in:
  • German: 9,075 of 9,075 pages
About the help in other languages
All help pages

Request shield: the log

The log page of Setup > Request shield - the periods, the decision groups, the columns, the client's network instead of a person's address, view parameters for a link to one view, and where the log file is.

Download as PDF

Address: https://doc.exponential.earth/learninminutes/exphelp/viewer/help/request-shield/the-log.md

On this page

Request shield: the log

Setup > Request shield > Log (/requestshield/log) lists what the shield wrote to its log: every request it refused, sent to the browser check or, in monitor mode, would have refused. Newest first. You need the policy requestshield/read.

Contents

  1. Choosing what to see
  2. The columns
  3. A link to one view
  4. The log file
  5. Settings of the log page

Choosing what to see

  • Period: the last 1, 6, 24, 72 or 168 hours.
  • Decision: All, Refused, Browser check, Watched (monitor) or Other, each with its count.
  • Newer and Older page through the lines, 50 at a time.

The columns

ColumnWhat it shows
Timewhen the shield decided
Clientthe client's network as the log wrote it
Requestthe method, host and path
Decisionwhat the shield did (refused, browser check, a monitor-... decision in monitor mode ...)
Statusthe HTTP status the client got
Rule and reasonthe rule ID that decided (EXP-SYSVIEW, EXP-LOGIN, SITE-DASH ...) and why

The Client column shows the address as the log wrote it: by default its network (IPv4 /24, IPv6 /48, the library's set log-ip masked), never a person's full address.

The rule ID is the thread to pull. It tells whoever looks after the rules which line decided; trace on the server shows the same decision step by step (The rules).

Every choice is a link with view parameters, so you can send a colleague exactly what you see:

/requestshield/log/(hours)/72/(group)/refused/(offset)/50

The log file

The shield writes var/request-shield/log/shield.log (with the shipped rules), one line per decision, rotated at the library's log-max-size. It is a plain file on the server; tail -f follows it. If the page says the log does not exist or cannot be read, the rules name no log file, or the web server cannot read it (Troubleshooting).

The record of who used the switches is a different file, var/log/requestshield.log, shown in Setup > Log files.

Settings of the log page

In settings/override/requestshield.ini.append.php, [AdminSettings]:

SettingDefaultMeaning
LogHours[]1, 6, 24, 72, 168the periods to choose from
LogPageSize50lines per page

Something wrong on this page? Report an error

Documentation license

This documentation is free documentation, licensed under the GNU Free Documentation License 1.3 or later.

Exponential Copyright © 1998-2026 Exponential Foundation and 7x