RUT955 Events Log (legacy WebUI)

From Teltonika Networks Wiki
Main Page > EOL Products > RUT955 > RUT955 Manual > RUT955 Legacy WebUI > RUT955 Status section (legacy) > RUT955 Events Log (legacy WebUI)

The information in this page is updated in accordance with firmware version RUT9XX_R_00.06.09.5.

Note: this user manual page is for RUT955's old WebUI style available in earlier FW versions. Click here for information based on the latest FW version.

Summary

The Events Log windows display records of such event as logins, reboots, resets, connections, configuration changes and more.

Status events log all events.PNG Status events log system.PNG Status events log network.PNG

Events Reporting

The Events Reporting section gives you the ability to configure rules that will inform you via SMS or email when certain events occur on your router. These events can be almost anything – configuration changes, reboots, new connections, various status updates, SIM switches, etc.


Status events log events reporting.PNG


Events Reporting Configuration


Events Reporting Configuration is used to create and customize Events Reporting Rules. Here you can specify any event type and subtype, chose whether you want to be informed by an SMS message or email, modify what kind of information you want receive should an event occur. To open this window, choose an Event type, Event subtype and Action and click the Add button. A new rule should appear in the Events Reporting Rules tab. Click the Edit button located next to that rule after which you will be redirected to that rule's configuration window.

Send SMS


Status events log events reporting rule configuration.PNG

FIELD NAME VALUE DESCRIPTION
Enable yes | no; default: no Toggles the rule ON or OFF
Event type Config change | New DHCP client | Mobile data | SMS | SIM switch | Signal Strength | Reboot | SSH | WebUI | New WiFi client | LAN port state | WAN failover | Restore point | GPS;

Default: Config change

The type of event that you wish to receive information about
Event subtype Sample: After unexpected shut down Specified event's sub-type. This field changes in accordance with Event type
Action Send SMS | Send email; Default: Send SMS Action that is to be taken after the specified event occurs
Enable delivery retry yes | no; default: no Toggles delivery retry On or OFF. If for some reason the message delivery is unsuccessful, the router initiates a retry if this field is enabled
Retry interval 1 min. | 5 min. | 10 min. | 15 min. | 30 min. | 60 min.; Default 5 min. Specifies when the router should try re-sending the message in case the first attempt was a failure
Retry count 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10; Default: 2 Specifies the maximum number of failed attempts after which the router does not try to send the message anymore
Message text on Event string; Default: Router name - %rn; Event type - %et; Event text - %ex; Time stamp - %ts; Specifies the text that the message will contain
Get status after reboot yes | no; default: no Specifies whether the router should send an SMS message indicating the router's status after the reboot in addition to the original message
Status message after reboot string; Default: Router name - %rn; WAN IP - %wi; Data Connection state - %cs; Connection type - %ct; Signal strength - %ss; New FW available - %fs; Specifies the text that the status message will contain. This field becomes visible only if Get status after reboot is checked
Recipients Single number | User group; Default: Single number Specifies the intended recipients. A guide on how to create a User group can be found in the SMS Utilities chapter, User Groups section
Recipient's phone number phone number; default: none The intended recipient's phone number. To add more than one number, click the green Services sms gateway auto reply plus symbol.PNG plus symbol located to the right of this field. The phone number must be entered in the international format, but without dash symbols or spaces, e.g., +37061234567

Send Email


Status events log events reporting rule configuration email.PNG

FIELD NAME VALUE DESCRIPTION
Enable yes | no; default: no Toggles the rule ON or OFF
Event type Config change | New DHCP client | Mobile data | SMS | SIM switch | Signal Strength | Reboot | SSH | WebUI | New WiFi client | LAN port state | WAN failover | Restore point | GPS;

Default: Config change

The type of event that you wish to receive information about
Event subtype Sample: After unexpected shut down Specified event's sub-type. This field changes in accordance with Event type
Action Send SMS | Send email; Default: Send SMS Action that is to be taken after the specified event occurs
Enable delivery retry yes | no; default: no Toggles delivery retry On or OFF. If for some reason the message delivery is unsuccessful, the router initiates a retry if this field is enabled
Retry interval 1 min. | 5 min. | 10 min. | 15 min. | 30 min. | 60 min.; Default 5 min. Specifies when the router should try re-sending the message in case the first attempt was a failure
Retry count 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10; Default: 2 Specifies the maximum number of failed attempts after which the router does not try to send the message anymore
Subject string; default: none Specifies the subject of the email message
Message text on Event string; Default: Router name - %rn; Event type - %et; Event text - %ex; Time stamp - %ts; Specifies the text that the message will contain
Get status after reboot yes | no; default: no Specifies whether the router should send an SMS message indicating the router's status after the reboot in addition to the original message. If this is checked you will be prompted to enter the text that the status message should contain
SMTP server ip | host; default: none Sender's email service provider's SMTP server. If you don't know the SMTP server's address, you can easily look it up online since it is public information
SMTP port integer [0..65535]; default: none Sender's email service provider's SMTP port. If you don't know the SMTP server's port, you can easily look it up online since it is public information
Secure connection yes | no; default: no Toggles secure connection feature ON or OFF (use only if the email service provider's server supports SSL or TLS)
Username string; default: none Sender's email account's login user name
Password string; default: none Sender's email account's login password
Sender's email address email; default: none The email address of the sender, i.e., the report message will be sent from this email. Make sure this is the same email that you provided login information to
Recipient's email address email; default: none The intended recipient's email address. To add more than one email address, click the green Services sms gateway auto reply plus symbol.PNG plus symbol located to the right of this field
Send test mail - Sends a test mail using the information that you provided. Once you click this button, the router will login to the provided email account and send the specified message to the specified address(-es). You should always send a test mail before finishing the configuration to make sure that everything is in order

Event Types and Sub-types


The examples provided above are both concerning the Reboot Event type and After unexpected shut down sub-type. This section is an overview of all other Event type and sub-types.

Config change

ENEBT SUB-TYPE DESCRIPTION
All Sends a report message when any type of configuration changes are applied
OpenVPN Sends a report message when any OpenVPN configuration changes are applied. For example, whenever a new OpenVPN instance is created, an OpenVPN instance gets disabled/enabled, an OpenVPN instance's protocol is changed from UDP to TCP or vice versa, etc.
SMS Sends a report message when any SMS related configuration changes are applied. For example, whenever a new SMS Utilities rule is created or changed, changes are made to Auto Reply or Remote configurations, etc.
Mobile traffic Sends a report message when Mobile Traffic Logging is enabled/disabled or logging interval is changed.
Multiwan Sends a report message when changes to WAN Backup configuration are applied. For example, whenever a switch from using Wired as main WAN to backup WAN occurs, Wireless is added as a Backup WAN, Health monitor configurations are changed, etc.
SIM switch Sends a report message when any SIM Management configuration changes are applied. For example, whenever the primary SIM card is changed, a new SIM switch rule is configured, SIM switching is turned ON or OFF, etc.
Mobile Sends a report message when any Mobile configuration changes are applied. For example, whenever Service mode, APN, Connection type is changed, etc.
Data limit Sends a report message when any Mobile Data Limit configuration changes are applied. For example, whenever new data limit is configured, data limit gets disabled/enabled on SIM1/SIM2, data limit period is changed, etc.
GPS Sends a report message when any configuration changes concerning GPS are applied. For example, whenever GPS gets enabled/disabled, Remote host/IP address is changed, new Geofencing area is defined, etc.
Events reporting Sends a report message when any configuration changes to Events Reporting are applied. For example, whenever a new Events Reporting Rule is created, changed, deleted, etc.
Periodic reboot Sends a report message when any configuration changes to Periodic Reboot are applied. For example, whenever Periodic Reboot gets enabled/disabled, Periodic Reboot interval is changed, etc.
SNMP Sends a report message when any configuration changes to SNMP are applied. For example, whenever SNMP service is enabled/disabled, SNMP remote access is enabled/disabled, SNMP port is changed, etc.
GRE Tunnel Sends a report message when any configuration changes to GRE Tunnel are applied. For example, whenever a new GRE Tunnel instance is created, deleted, enabled/disabled, Local tunnel IP is changed, etc.
Ping reboot Sends a report message when any configuration changes to Ping Reboot are applied. For example, whenever Ping Reboot gets enabled/disabled, host to ping has changed, etc.
Auto update Sends a report message when any configuration changes to Auto update are applied
Site blocking Sends a report message when any configuration changes to Site Blocking are applied. For example, whenever Whitelist is changed to Blacklist or vice versa, a new entry is added to Blacklist/Whitelist, etc.
PPTP Sends a report message when any configuration changes to PPTP are applied. For example, whenever a new PPTP instance was created, deleted, enabled/disabled, PPTP server address was changed, etc.
Hotspot Sends a report message when any configuration changes to Hotspot are applied. For example, whenever Hotspot SSID was changed, Radius server was changed, Hotspot was enabled/disabled, etc.
Input/Output Sends a report message when any configuration changes to Input/Output are applied. For example, whenever a new Periodic Output Control Rule was created, changed, deleted, an output was turn ON/OFF, etc.
Content blocker Sends a report message when any configuration changes to Proxy Based Content Blocker are applied. For example, whenever Whitelist is changed to Blacklist or vice versa, a new entry is added to Blacklist/Whitelist, etc.
Login page Sends a report message when any login settings are changed
Language Sends a report message when any language settings are changed
Profile Sends a report message when a new Profile is added or deleted
DDNS Sends a report message when any configuration changes to Dynamic DNS are applied. For example, whenever a new DDNS instance is created, changed, deleted or edited
IPsec Sends a report message when any configuration changes to IPsec are applied. For example, a new IPsec instance is created, changed, deleted, etc.
Access control Sends a report message when any configuration changes to Access Control are applied. For example, SSH/HTTP/HTTPS remote or local access is enabled/disabled, changes are made to SSH or WebUI Access Secure, etc.
DHCP Sends a report message when any configuration changes to DHCP are applied. For example, whenever DHCP Server is enabled/disabled, DHCP address range is changed
RS232/RS485 Sends a report message when any configuration changes to RS232/RS485 are applied. For example, whenever RS232 or RS485 configuration is enabled/disabled, baud rate is changed, etc.
VRRP Sends a report message when any configuration changes to VRRP are applied. For example, whenever VRRP is enabled/disabled, VRRP IP address is changed, etc.
SSH Sends a report message when any configuration changes to SSH are applied
Network Sends a report message when any Network related configuration changes are applied. For example, whenever Main WAN is changed, LAN IP address is changed, a Wi-Fi Access Point is enabled/disabled, etc.
Wireless Sends a report message when any configuration changes to Wireless are applied. For example, a new Wi-Fi Access point is created, deleted, enabled/disabled, SSID is changed, etc.
Firewall Sends a report message when any configuration changes to Firewall are applied. For example, a new Traffic rule is added, a new SNAT rule is added, a rule is disabled/enabled, etc.
NTP Sends a report message when any configuration changes to NTP are applied. For example, whenever NTP is enabled/disabled, Time zone is changed, etc.
L2TP Sends a report message when any configuration changes to L2TP are applied. For example, whenever a new L2TP instance was created, changed, deleted, etc.
Other Sends a report message when any configuration changes other than the ones provided above are applied
New DHCP client

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when a new devices is connected to the router either via LAN or Wi-Fi
Connected from WiFi Sends a report message when a new device is connected to the router via Wi-Fi
Connected from LAN Sends a report message when a new device is connected to the router via LAN port
Mobile Data

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when mobile data connection status changes (from Connected to Disconnected or vice versa)
Connected Sends a report message when mobile data connection is achieved
Disconnected Sends a report message when mobile data connection is lost
SMS

EVENT SUB-TYPE DESCRIPTION
SMS received Sends a report message when the router receives a new SMS message
SIM Switch

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when the router switches the SIM card in use
From SIM1 to SIM2 Sends a report message when the router switches from using SIM1 to SIM2
From SIM2 to SIM1 Sends a report message when the router switches from using SIM2 to SIM1
Signal Strength

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when the router's RSSI value leaves any one of the below specified ranges
-121 dBm -113 dBm Sends a report message when the router's RSSI value leaves the -121 dBm to -113 dBm range
-113 dBm -98 dBm Sends a report message when the router's RSSI value leaves the -113 dBm to -98 dBm range
-98 dBm -93 dBm Sends a report message when the router's RSSI value leaves the -98 dBm to -93 dBm range
-93 dBm -75 dBm Sends a report message when the router's RSSI value leaves the -93 dBm to -75 dBm range
-75 dBm -60 dBm Sends a report message when the router's RSSI value leaves the -75 dBm to -60 dBm range
-60 dBm -50 dBm Sends a report message when the router's RSSI value leaves the -60 dBm to -50 dBm range
Reboot

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when the router starts up after any type of reboot (except factory reset)
After unexpected shutdown Sends a report message when the router starts up after any type of reboot (except factory reset)
After FW upgrade Sends a report message when the router starts back up again after FW upgrade
From WebUI Sends a report message when the router starts up after a reboot command is initiated from the router's WebUI Administration->Reboot section
From SMS Sends a report message when the router starts up after a reboot command is initiated via SMS
From Input/Output Sends a report message when the router starts up after a reboot command is initiated via Input/Output
From ping reboot Sends a report message when the router starts up after a reboot command is initiated by the Ping Reboot function
From periodic reboot Sends a report message when the router starts up after a reboot command is initiated by the Periodic Reboot function
From button Sends a report message when the router starts up after being restarted by the press of the physical button located on the router
SSH

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when someone connects to the router via SSH (either successfully or unsuccessfully)
Successful authentication Sends a report message when someone successfully connects to the router via SSH
Unsuccessful authentication Sends a report message when someone unsuccessfully tries to connect to the router via SSH
WebUI

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when someone connects to the router via HTTP or HTTPS (either successfully or unsuccessfully)
Successful authentication Sends a report message when someone successfully connects to the router via HTTP or HTTPS
Unsuccessful authentication Sends a report message when someone unsuccessfully tries to connect to the router via HTTP or HTTPS
New WiFi client

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when a device connects to or disconnects from the router's WLAN (Wireless Network or Wireless LAN)
Connected Sends a report message when a device connects to the router's WLAN
Disconnected Sends a report message when a device disconnects from the router's WLAN
LAN Port State

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when a device is either plugged in or unplugged from one of the router's LAN ports
Unplugged Sends a report message when a device is unplugged from one of the router's LAN ports
Plugged in Sends a report message when a device is plugged into one of the router's LAN ports
WAN failover

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when the router switches from using the Main WAN to using the Backup WAN and vice versa
Switched to main Sends a report message when the router switches from using the Main WAN to using the Backup WAN
Switched to backup Sends a report message when the router stops using the Backup WAN and start using the Main WAN
Restore Point

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when either when a new Restore point is created or a Restore Point is loaded in to the router
Save Sends a report message when a new Restore Point is created
Load Sends a report message when a Restore Point is loaded on to the router
GPS

EVENT SUB-TYPE DESCRIPTION
All Sends a report message when the router moves in and out of the GPS Geofence area
Left geofence Sends a report message when the router leaves the GPS Geofence area
Entered geofence Sends a report message when the router enter the GPS Geofence area

Reporting Configuration

The Reporting Configuration section lets you create rules that transfer logs to email, FTP or Syslog server.


Status events log reporting configuration.PNG

Events Log Report Configuration


Events Log Report Configuration provides you with the ability to change the configuration of periodic events reporting to email, FTP or Syslog server. You can access it by creating a rule and clicking the Edit button next to it, just like Event Reporting Configuration.

FTP


Status events log events log reporting configuration.PNG

FIELD NAME VALUE DESCRIPTION
Enable yes | no; default: no Toggles the log file report rule ON or OFF
Events log System | Network | All; Default: System Specifies which log to transfer
Transfer type Email | FTP| Syslog server; Default: Email Specifies whether to transfer the log(s) to FTP, Syslog server or Email
Compress file yes | no; default: no Compress events log file using gzip
Enable delivery retry yes | no; default: no Toggles delivery retry On or OFF. If for some reason the message delivery is unsuccessful, the router initiates a retry if this field is enabled
Host host | ip; default: none FTP server's IP address or hostname
Retry count 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10; Default: 2 Specifies the maximum number of failed attempts after which the router does not try to send the message anymore
User name string; default: none Login user name used for authentication to the FTP server
Password string; default: none Login password used for authentication to the FTP
Interval between reports Week | Month | Year; Default: Week Specifies how often the reports should be sent
Weekday | Month day weekday | month day; Default: Sunday Specifies the day of the month/week when the logging should take place. This field changes in accordance with Interval between reports
Hour integer [1..24]; Default: 1 Specifies on the hour of the day when the logging should take place

Email


Status events log events log reporting configuration email.PNG

FIELD NAME VALUE DESCRIPTION
Enable yes | no; default: no Toggles the log file report rule ON or OFF
Events log System | Network | All; Default: System Specifies which log to transfer
Transfer type Email | FTP | Syslog server; Default: Email Specifies whether to transfer the log(s) to FTP, Syslog server or Email
Compress file yes | no; default: no Compress events log file using gzip
Subject string; default: none Specifies the subject of the email log message
Message string; default: none The text contained in the log email. This has nothing to do with the log itself, which will be sent as an attached file
SMTP server ip | host; default: none Sender's email service provider's SMTP server. If you don't know the SMTP server's address, you can easily look it up online since it is public information
SMTP server port integer [0..65535]; default: none Sender's email service provider's SMTP server. If you don't know the SMTP server's address, you can easily look it up online since it is public information
Secure connection yes | no; default: no Toggles secure connection feature ON or OFF (use only if the email service provider's server supports SSL or TLS)
Username string; default: none Sender's email account's login user name
Password string; default: none Sender's email account's login password
Sender's email address email; default: none The email address of the sender, i.e., the report message will be sent from this email. Make sure this is the same email that you provided login information to
Recipient's email address email; default: none The intended recipient's email address. To add more than one email address, click the green Services sms gateway auto reply plus symbol.PNG plus symbol located to the right of this field
Interval between reports Week | Month | Year; Default: Week Specifies how often the reports should be sent
Weekday | Month day weekday | month day; Default: Sunday Specifies the day of the month/week when the logging should take place. This field changes in accordance with Interval between reports
Hour integer [1..24]; Default: 1 Specifies on the hour of the day when the logging should take place

Syslog server


Networking rut9xx status events log events log reporting configuration syslog.png

FIELD NAME VALUE DESCRIPTION
Enable yes | no; default: no Toggles the log file report rule ON or OFF.
Events log System | Network | All; Default: System Specifies which log to transfer.
Transfer type Email | FTP | Syslog server; Default: Syslog server Specifies whether to transfer the log(s) to FTP, Syslog server or Email.
Host host | ip; default: none Syslog server's IP address or hostname.
Port integer [0..65535]; default: none Syslog server's port.
Protocol TCP | UDP; default: none Choose protocol to be used when communicating to server.