Logging from the Workspace ONE Access service and the Workspace ONE Access connector components are available using syslog. The Integration Broker component logs locally. The logs can be collected and reviewed on the server or through a central logging service such as vRealize Log Insight or Splunk. For Workspace ONE Access connector log-file information, see the Installing Workspace ONE Access Connector guide.
To send audit logs and system events to vRealize Log Insight, you can download and install vRealize Log Insight Agent on each Workspace ONE Access node. See Install and Configure the vRealize Log Insight Agent on the Workspace ONE Access Nodes for directions about how to download and install vRealize Log Insight.
Workspace ONE Access Service Logging
Log Locations
Most service logs are located at /opt/vmware/horizon/workspace/logs/.
| Log | Purpose |
|---|---|
| greenbox_web.log | Log which contains all user interface interactions for web and mobile |
| horizon.log | Workspace ONE Access service log which includes Identity Adapters, RabbitMQ, Elasticsearch, Ehcache, and other subsystems |
| connector.log | Connector log for all authentication methods and integrations with Horizon and Citrix |
| cert-proxy.log | Workspace ONE Access service CertProxy component for Android Mobile SSO |
| configurator.log | Requests that the Configurator receives from the REST client and the Web interface |
| /opt/vmware/var/log/update.log | A record of output messages related to update requests during an upgrade of Workspace ONE Access |
| /opt/vmware/var/log/vami/ | The files in the /opt/vmware/var/log/vami directory are useful for troubleshooting. You can find these files on all virtual machines after an upgrade. |
| catalina.log | Apache Tomcat records of messages that are not recorded in other log files |
| /var/log/journal/<logfoldername> | iOS KDC logs for Mobile SSO To retrieve the logs for iOS KDC, run |
Syslog Server Setup
To set up a syslog server, see Configure a Syslog Server for Workspace ONE Access.
Integration Broker Logging
Integration Broker logs are located in the following location:
C:\ProgramData\VMware\HorizonIntegrationBroker
The logs are captured by day and contain all REST API calls made to and by Integration Broker.
