Access WatchGuard Event Logs for Internet Failover Analysis

draft · network log-viewernetwork-issuesserver

Generated by docuprocessor (prompt article/v3) · 2026-04-22 09:46

Source thread

thread_id: spaces/AAAA05BdS6s/threads/J7wadzaorE0 · 9 msgs · first 2024-08-07 · participants: Tech ATech BTech C

Tech A 2024-08-07 21:53

there was an internet issue on pediatric Dentistry of Valley, failover worked and jumped to the secondary; then it went back to primary; I Would like to know how to check or Read WG event Logs, to see if a sort of report could be done.

Tech B 2024-08-07 21:54

@Alex Kaplun Can you plz share some of your wisdom?

Tech C 2024-08-07 21:59

There is a dimension server https://172.17.200.8 admin | D3ntal$$ First check if it’s in the list, I know there’s couple of locations that are expired and don’t report logs to central

Tech C 2024-08-07 22:00

If it’s there, click it and select dates for which you want to see logs/data

Tech C 2024-08-07 22:02

In the log viewer you can filter out what you want to see

image/jpeg Image_20240807_170138_857.jpeg

This is a reference table documenting log type options for a network/firewall device logging interface. Six log types are listed: **Traffic** (returns Disposition, Date-Time, Source, Interface, Destination, Port, Interface, Protocol, Policy), **Alarm** (Date-Time, Alarm Name, Message), **Event** (Date-Time, Process, Priority, Message), **Diagnostic** (Date-Time, Process, Message), **Statistic** (Date-Time, Device, Bytes Received, Bytes Sent), and **All** (Type, Date-Time, Detailed Message). Each log type has an associated icon button visible in the left column.

Tech C 2024-08-07 22:03

Narrow down to the dates and times you’re looking for and look for related messages or keywords

Tech B 2024-08-07 22:04

Got it. Thanks! @Rommell Bermudez what time was the outage?

Tech A 2024-08-07 22:06

Around 4:20 PM

Tech B 2024-08-07 22:09

enjoy the reading 🙂

application/x-zip-compressed PDS-VALLEY_STREAM_2024-08-07 16_00_2024-08-07 16_31.zip

---
title: "Access WatchGuard Event Logs for Internet Failover Analysis"
category: network
tags: ["log-viewer", "network-issues", "server"]
source_thread_id: "spaces/AAAA05BdS6s/threads/J7wadzaorE0"
source_space: "spaces/AAAA05BdS6s"
generated_at: "2026-04-22T09:46:17"
participants: ["Tech A", "Tech B", "Tech C"]
---

# Access WatchGuard Event Logs for Internet Failover Analysis

## Problem
An internet outage occurred at a client office around 4:20 PM, triggering automatic failover to secondary connection before returning to primary. Tech needed to access WatchGuard event logs to analyze the failover event and generate a report documenting what happened during the outage.

## Resolution
1. Access the dimension server at https://172.17.200.8 using credentials `admin | D3ntal$$`
2. Verify the target location appears in the device list (some locations may be expired and not reporting logs to central)
3. Click on the desired location and select the date range for log analysis
4. In the log viewer, use the filter options to narrow down log types:
   - **Traffic** - Shows disposition, date-time, source, interface, destination, port, protocol, policy
   - **Alarm** - Shows date-time, alarm name, message
   - **Event** - Shows date-time, process, priority, message
   - **Diagnostic** - Shows date-time, process, message
   - **Statistic** - Shows date-time, device, bytes received/sent
   - **All** - Shows type, date-time, detailed message
5. Filter to the specific time window of the outage (around 4:20 PM in this case)
6. Search for related messages or keywords associated with failover events

## References
- Source discussion: `spaces/AAAA05BdS6s/threads/J7wadzaorE0`
- Attachments:
  - ![Image_20240807_170138_857.jpeg](../attachments/J7wadzaorE0.Z6Mw-X_45Yc/Image_20240807_170138_857.jpeg) — This is a reference table documenting log type options for a network/firewall device logging interface. Six log types are listed: **Traffic** (returns Disposition, Date-Time, Source, Interface, Destination, Port, Interface, Protocol, Policy), **Alarm** (Date-Time, Alarm Name, Message), **Event** (Date-Time, Process, Priority, Message), **Diagnostic** (Date-Time, Process, Message), **Statistic** (Date-Time, Device, Bytes Received, Bytes Sent), and **All** (Type, Date-Time, Detailed Message). Each log type has an associated icon button visible in the left column.
  - ![PDS-VALLEY_STREAM_2024-08-07 16_00_2024-08-07 16_31.zip](../attachments/J7wadzaorE0.aWDLWnuyhZE/PDS-VALLEY_STREAM_2024-08-07 16_00_2024-08-07 16_31.zip)

Generated article

draft