Locate the Invicti IAST sensor logs

The Invicti IAST produce logs, which can help troubleshoot problems with the IAST sensors. Each Invicti IAST sensor has its own way of logging. This article provides more information about the log location for each Invicti IAST sensor and any related configuration options.

How to find Invicti IAST sensor logs

• .NET Framework
• .NET Core
• Node.js
• Java
• PHP

.NET Framework for both Windows and Linux

1. Locate the Invicti .NET IAST sensor’s `settings.ini` file.

• For .NET Framework, the `settings.ini` file is located in the same folder as `injector.exe`, which by default is named .NET Framework inside the folder where you extracted the dotnet-iastsensor.zip file. For example, in the screenshot below, we extracted the dotnet-iastsensor.zip file inside C:\ProgramData\InvictiPlatform\dotnet-iastsensor.

2. Uninstall the current sensor.
3. Modify the settings.ini file. With administrative privileges and read/write permission, open the `settings.ini` file using a text editor.
4. Amend the `log.path` to point to an existing folder.

5. Save the changes made to the settings.ini file before closing the text editor.
6. Install/inject the sensor again.

.Net Core for both Windows and Linux

1. Locate the Invicti .NET IAST sensor’s `settings.ini` file.

• For .Net Core, .Net6, and .NET8 (both Windows and Linux), the `settings.ini` file is located inside the folder where you extracted the `dotnet-iastsensor.zip`. For example, we extracted the `dotnet-iastsensor` inside C:\ProgramData\InvictiPlatform\dotnet-iastsensor.

2. Once you have extracted the files, amend the `settings.ini` file.  With administrative privileges and read/write permission, open the `settings.ini` file using a text editor.
3. Amend the `log.path` to point to an existing folder.

4. Save the changes made to the settings.ini file before closing the text editor.
5. Restart the application/server/service for the changes to take effect.

Node.js log location

1. In Node.js, logs are integrated with the application's output, appearing directly in the terminal alongside other application logs.
2. By utilizing `npx node-iastsensor app.js >> c:\temp\sensor.log`, you're able to designate the location for saving logs.
3. Restart the application/server/service for the changes to take effect.

Java log location

1. To enable debug logs, add this Java parameter to the command line or to the ‘JAVA_OPTS’ environment variable: Diastsensor.debug.log=ON
2. The sensor will output logs with the server logs. Refer to your web server documentation to identify your server’s default log location.
3. Restart the application/server/service for the changes to take effect.

PHP log location

The PHP Sensor records entries in the web application error logs, which are managed via the error log directive of the web server.

1. Detailed instructions for configuring this functionality are provided in the documentation for each supported web server:

• Apache 2: Refer to https://httpd.apache.org/docs/2.4/mod/core.html#errorlog
• Nginx: Refer to https://docs.nginx.com/nginx/admin-guide/monitoring/logging/

2. Restart the application/server/service for the changes to take effect.