Locate the Invicti IAST sensor logs

The Invicti IAST produce logs, which can help troubleshoot problems with the IAST sensors. Each Invicti IAST sensor has its own way of logging. This document provides more information about the log location for each Invicti IAST sensor and any related configuration options.

.NET Framework for both Windows and Linux

1. Locate the Invicti .NET IAST sensor’s settings.ini file.
   • For .NET Framework, the settings.ini file is located in the same folder as injector.exe, which by default is named .NET Framework inside the folder where you extracted the dotnet-iastsensor.zip file. In the example screenshot, we extracted the dotnet-iastsensor.zip file inside C:\ProgramData\InvictiPlatform\dotnet-iastsensor.

2. Uninstall the current sensor.
3. Modify the settings.ini file. With administrative privileges and read/write permission, open the settings.ini file using a text editor.
4. Amend the log.path to point to an existing folder.

5. Save the changes made to the settings.ini file before closing the text editor.
6. Install/inject the sensor again.

.Net Core for both Windows and Linux

1. Locate the Invicti .NET IAST sensor’s settings.ini file.
   • For .Net Core, .Net6, and .NET8 (both Windows and Linux), the settings.ini file is located inside the folder where you extracted the dotnet-iastsensor.zip. For example, we extracted the dotnet-iastsensor inside C:\ProgramData\InvictiPlatform\dotnet-iastsensor.

2. Once you have extracted the files, amend the settings.ini file. With administrative privileges and read/write permission, open the settings.ini file using a text editor.
3. Amend the log.path to point to an existing folder.

4. Save the changes made to the settings.ini file before closing the text editor.
5. Restart the application/server/service for the changes to take effect.

Node.js log location

1. In Node.js, logs are integrated with the application's output, appearing directly in the terminal alongside other application logs.
2. By utilizing npx node-iastsensor app.js >> c:\temp\sensor.log, you're able to designate the location for saving logs.
3. Restart the application/server/service for the changes to take effect.

Java log location

1. To enable debug logs, add this Java parameter to the command line or to the ‘JAVA_OPTS’ environment variable: Diastsensor.debug.log=ON
2. The sensor outputs logs with the server logs. Refer to your web server documentation to identify your server’s default log location.
3. Restart the application/server/service for the changes to take effect.

PHP log location

The PHP Sensor records entries in the web application error logs, which are managed via the error log directive of the web server.

1. Detailed instructions for configuring this functionality are provided in the documentation for each supported web server:
   • Apache 2: Refer to https://httpd.apache.org/docs/2.4/mod/core.html#errorlog
   • Nginx: Refer to https://docs.nginx.com/nginx/admin-guide/monitoring/logging/
2. Restart the application/server/service for the changes to take effect.

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center