If you encounter issues with your VMware Tunnel deployment, the component logs allow you to diagnose issues. These logs are useful when contacting AirWatch Support.

To simplify troubleshooting your VMware Tunnel deployment, consider using the tunnel_snap utility. For more information, see Tunnel_Snap Troubleshooting Utility.

Per-App Tunnel logs are stored in the native syslog system of Linux. Logs are stored in /var/log/vmware/tunnel and can be sorted by the following command (as root):

tail -f /var/log/vmware/tunnel/vpnd/tunnel.log

Change Log Level

Change the log level to meet your troubleshooting need.

To change the log level:

  1. Edit /opt/vmware/tunnel/vpnd/server.conf
  2. Change log_level <VALUE> to log_level 4 and Save.

    If you are writing logs to rsyslog, enable debugging in the rsyslog configuration file.

  3. Stop and Start the service.
  4. Revert changes and restart both services when finished.

Enabling Debug in rsyslog:

  1. Edit rsyslog.conf as root:

  2. Change log_level <VALUE> to log_level 4 and Save.

  3. Stop and Start the service.

  4. Revert changes and restart both services when finished.

Virtual Appliance Logs

You can access the VMware Tunnel logs from the virtual appliance by accessing a specific URL based on your deployment. Enter the URL into a browser to download a ZIP file that contains your logs.

https://<virtual appliance domain name>:9443/rest/v1/monitor/support-archive.

Commands

Virtual Appliance

                  
                  
                  
                  
                  systemctl start vpnd – Starts the service.
                  
                  
                  
                  
                  systemctl stop vpnd – Stops the service.
                  
                  
                  
                  
                  systemctl restart vpnd – Restarts the service.
                  
                  
                  
                  
               

CentOS/RHEL 6.x:

                  
                  
                  
                  
                  service vpnd start – Starts the service.
                  
                  
                  
                  
                  service vpnd stop – Stop the service.
                  
                  
                  
                  
                  service vpnd restart – Restarts the service.
                  
                  
                  
                  
               

CentOS/RHEL 7.x:

                  
                  
                  
                  
                  systemctl start vpnd – Starts the service.
                  
                  
                  
                  
                  systemctl stop vpnd – Stops the service.
                  
                  
                  
                  
                  systemctl restart vpnd – Restarts the service.
                  
                  
                  
                  
               

Proxy

Proxy logs are stored in the native syslog system of Linux. Logs are stored in /var/log/airwatch/proxy and can be sorted by the following command (as root):

tail -f /var/log/airwatch/proxy/proxy.log

Virtual Appliance Logs

You can access the VMware Tunnel logs from the virtual appliance without logging into the appliance by accessing a specific URL based on your deployment. Enter the URL into a browser to download a ZIP file that contains your logs.

https://<virtual appliance domain name>:9443/rest/v1/monitor/support-archive.

Commands

Proxy – Any CentOS/RHEL version/Virtual Appliance:

                  
                  
                  
                  
                  sudo service proxy start – Starts the service.
                  
                  
                  
                  
                  sudo service proxy stop – Stops the service.
                  
                  
                  
                  
                  sudo service proxy restart – Restarts the service.
                  
                  
                  
                  
                  sudo service proxy status – Shows the status of the service.
                  
                  
                  
                  
               

Change Proxy Log Level

You can change the log levels for the Proxy component in the AirWatch Console by navigating to Groups & Settings > All Settings > System > Enterprise Integration > VMware Tunnel > Configuration > Advanced . In cases where communication breaks between the VMware Tunnel and AWCM or API, you can still change the log level with the following steps:

  1. Edit the /opt/vmware/tunnel/proxy/conf/logback.xml file.
  2. Change <root>log-level="VALUE" to DEBUG and Save on file.
  3. Stop and Start the service.
  4. Revert changes and restart the proxy service when finished.