Use logs to monitor operations and events

Last published : Sep 03, 2026
Use audit and task logs to monitor the operations performed on the Management Service and on the NetScaler SDX instances. You can also use the events log to track all events for tasks performed on the Management Service and the Citrix Hypervisor.

View the audit logs

All operations performed by using the Management Service are logged in the appliance database. Use audit logs to view the operations that a Management Service user has performed, the date and time, and the success or failure status of each operation. You can also sort the details by user, operation, audit time, status, and so on by clicking the appropriate column heading.
Pagination is supported in the Audit Log pane. Select the number of records to display on a page. By default, 25 records are displayed on a page.
To view audit logs, follow these steps:
  1. In the navigation pane, expand System, and then click Audit.
  2. In the Audit Log pane, you can view the following details.
    • User Name: the Management Service user who has performed the operation.
    • IP Address: the IP address of the system on which the operation was performed.
    • Port: the port at which the system was running when the operation was performed.
    • Resource Type: the type of resource used to perform the operation, such as xen_vpx_image and login.
    • Resource Name: the name of the resource used to perform the operation, such as vpx_image_name and the user name used to log in.
    • Audit Time: the time when the audit log was generated.
    • Operation: the task that was performed, such as add, delete, and log out.
    • Status: the status of the audit, such as Success or Failed.
    • Message: a message describing the cause of failure if the operation has failed and the status of the task, such as Done, if the operation was successful.
  3. To sort the logs by a particular field, click the heading of the column.

View task logs

Use task logs to view and track tasks, such as upgrading instances and installing SSL certificates, that are run by the Management Service on the NetScaler instances. The task log lets you view whether a task is in progress or has failed or has succeeded.
Pagination is supported in the Task Log pane. Select the number of records to display on a page. By default, 25 records are displayed on a page.
To view the task log, follow these steps:
  1. In the navigation pane, expand Diagnostics, and then click Task Log.
  2. In the Task Log pane, you can view the following details.
    • Name: the name of the task that is being run or has already been run.
    • Status: the status of the task, such as In progress, Completed, or Failed.
    • Executed By: the Management Service user who has performed the operation.
    • Start Time: the time at which the task started.
    • End Time: the time at which the task ended.

View task device logs

Use task device logs to view and track tasks being performed on each SDX instance. The task device log lets you view whether a task is in progress or has failed or has succeeded. It also displays the IP address of the instance on which the task is performed.
To view the task device log, follow these steps:
  1. In the navigation pane, expand Diagnostics, and then click Task Log.
  2. In the Task Log pane, double-click the task to view the task device details.
  3. In the Task Device Log pane, to sort the logs by a particular field, click the heading of the column.

View task command logs

Use task command logs to view the status of each command of a task run on a NetScaler instance. The task command log lets you view whether a command has been successfully run or has failed. It also displays the command that is run and the reason why a command has failed.
To view the task command log, follow these steps:
  1. In the navigation pane, expand Diagnostics, and then click Task Log.
  2. In the Task Log pane, double-click the task to view the task device details.
  3. In the Task Device Log pane, double-click the task to view the task command details.
  4. In the Task Command Log pane, to sort the logs by a particular field, click the heading of the column.

View events

Use the Events pane in the Management Service user interface to monitor the events generated by the Management Service for tasks performed on the Management Service.
To view the events, follow these steps:
  1. Navigate to System > Events.
  2. In the Events pane, you can view the following details.
    • Severity: the severity of an event, which might be critical, major, minor, clear, and information.
    • Source: the IP address on which the event is generated.
    • Date: the date when the event is generated.
    • Category: the category of event, such as PolicyFailed and DeviceConfigChange.
    • Message: the message describing the event.
  3. To sort the events by a particular field, click the heading of the column.