Issue description
You may not be able to access EventLog Analyzer user interface or web console in your browser or over multiple machines thou EventLog Analyzer is running as service/console mode. This article offers possible cause and step by step instructions on how to identify the root cause and resolve this case.
Possible cause
Incorrect URL accessed: If you are accessing an incorrect URL for accessing the console.
Port/IP Restriction: Port and IP restrictions at network level or application level.
Unsupported Web browser: Usage of unsupported web browsers will restrict the access to user interface.
Name resolution: Improper name resolution configuration in DNS.
HSTS & SSL : Having enabled HSTS in browser and usage of invalid SSL certificate.
Resource starvation: CPU/RAM and high disk usage lead to resource starvation.
Prerequisites
Remote login: Ensure the Web-ports are allowed and not restricted in Application installed server's Firewall and network firewall.
Access to EventLog Analyzer/Log360 server as administrator.
Steps to follow
Check if you are able to access the user interface on EventLog Analyzer/Log360 installed server and if the issue is accessing on any specific device.
Case 1: Able to access the User interface in local machine but not in remove machine.
Case 2: Unable to access the User interface in both local and remote machine.
Case 1: Able to access the User interface in local machine but not in remote machine.
Verify and allow the application web server port is allowed and not blocked in both the server’s local firewall and the network firewall, ensuring bidirectional communication.
Perform connectivity test from application installed server using native commands based on OS like Test-NetConnection/telnet for Windows OS and netcat/nmap/telnet for Linux/Unix OS to check if you are able to communicate the application installed server over the web port.
Syntax:
Windows OS:
Test-NetConnection <remote_host> -Port <port_number>
telnet <remote_host> <port_number>
Linux/Unix OS:
nc -zv <remote_host> <port_number>
telnet <remote_host> <port_number>
nmap -p <port_number> <remote_host>
where,
<remote_host> - Hostname or IP address of the remote machine where you are trying to access the user interface.
<port_number> - Webport of EventLog Analyzer/Log360 that you use to access the URL.
Ensure if there are any security application or browser extensions that may block the traffic.
Check the URL that you use to access the user-interface. Ensure your are using either Server hostname, IP address, FQDN or DNS name to access the URL. The syntax of the URL is as follows:
<Protocol>://<Server Name>:<Port Number>
where,<Protocol> - Protocol used by EventLog Analyzer/Log360. (Possible value - HTTP/HTTPS)<Server Name> - This can be either EventLog Analyzer/Log360 server's Hostname, IP Address, FQDN or DNS Name. <Port Number> - Port number refers to EventLog Analyzer/Log360 webserver port. (Default value - For build below 13000, HTTP port: 8400 and HTTPS port: 8445For Log360 and EventLog Analyzer built 13000 and above, HTTP port: 8095 and HTTPS port: 8458) Webserver Ports can be customized in Connection Settings. If you want to know the Protocol and Port number used by the application, you can either check them in Connection Settings or in wrapper.txt file located in <Installation directory>/logs folder without starting the application. Please follow the below steps to identify which protocol or port number has been utilized using wrapper.txt log file. Open <Product Installation Directory>\logs folder
Open wrapper.txt file as Text editor
Scroll down to the end.
Check if you can see the localhost URL with the keyword as "localhost" Sample image below.
NOTE: Ensure that you are referring to the most recent localhost URL and post which the wrapper process is not stopped.
NOTE: Localhost URL can be used to access the userinterface only in EventLog Analyzer/Log360 installed server's browser. If you are accessing the user interface in remote machine, replace localhost with Hostname, IP address, FQDN or DNS name of the EventLog Analyzer/Log360 installed server.
Access the user interface in local machine and check if you have limited the access for user interface using Allow/restrict IP address settings.
Navigate to Settings >> Admin Settings >> Logon Settings >> Allow/restrict IP address settings and update the configuration to allow the remote IP to access the user interface. Access the user interface in local server, navigate to Settings >> Admin Settings >> Connection Settings and check the Bind Address and Application Access URL under Advanced category. Image below.
Note down the Application Access URL and ensure to use the same to access them.
If you have multiple IP address with your NIC on the server, you will be able to view the list of IP address in Bind Address option. By default, the settings is set to use "All Interface", if you have customized the options, ensure the DNS resolution happens for the respective IP address from the remote host machine.
If you use a proxy server in your environment for accessing EventLog Analyzer/Log360 server, ensure the configuration in proxy server does not block the access to user interface or traffic over webserver port.
If the issue persists, follow the steps mentioned in Case 2
Case 2: Unable to access the User interface in both local and remote machine.
Check if the application is up and running either as service or console mode.
Open <Product Installation Directory>\logs folder
Open wrapper.txt file as Text editor
Scroll down to the end.
Check if you can see the localhost URL with the keyword as "localhost" Sample image below.
NOTE: Ensure that you are referring to the most recent localhost URL and post which the wrapper process is not stopped.
NOTE: Localhost URL can be used to access the user interface only in EventLog Analyzer/Log360 installed server's browser. If you are accessing the user interface in remote machine, replace localhost with Hostname, IP address, FQDN or DNS name of the EventLog Analyzer/Log360 installed server.
If you have applied SSL certificate for the application, signed by either internal/external/self-signed, ensure the root CA is added as Trusted Root CA in Remote machine & is recognized by its browser. Review the steps based on OS vendor & network setup recommendation.
If you have applied SSL certificate and ensure if Server Name value in the Access URL matches the CN(common name) or listed under SAN (Subject Alternative Name).
Example: If your CN value in the certificate = *.ManageEngine.com (wildcard certificate) and your access URL is https://Logserver01:8458 , browser will not be able to match the CN value and the URL will be flagged as Not Secured connection. If you have enforced HSTS, the browser may block the connection completely and you will not be able to access the User interface. Correct URL to be accessed as per above example: https://Logserver01.ManageEngine.com:8458 Check the CPU, RAM, and disk utilization on the server where EventLog Analyzer/Log360 is installed.If you observe high usage or resource spikes, it may lead to delays in loading the user interface or even timeout errors due to insufficient system resources. If you find resource starvation, refer System Requirements and ensure if you are complied as per recommendation. You can also consider increasing product heap memory if you have sufficient resource allocated and all the above are satisfied. Refer to Increasing Product Memory for the steps.
NOTE: Application will increase the heap memory when the application runs out of memory, however, for smooth performance, you may consider to increase it manually. RAM allocated should not exceed 8 GB = 8,192 MB
If the issue persist, gather the details mentioned in How to reach support to assist you further.
Tips
Related topics and articles
How to reach support
If the issue persists, get the following details ready and click here to reach the support team to assist you further on this. Explain the step that you have followed and the behavior that you noticed.
Following files form the respective directory for analysis
<Installation Directory>/logs folder
serverout_(latest date).txt
catalina_(latest date).txt
wrapper.txt
adslog(numeric).txt (all the files created on the day)
<Installation Directory>/conf folder
server.xml (old and new file - If applicable)
web.xml (old and new file - If applicable)
Basic idea about your network and certificates applied - If SSL certificate enabled?, Is proxy server available? Is proxy server and application's SSL certificate is not expired/invaild etc.