Log file encryption

The log files saved in local storage can be encrypted using the AES-256-CTR cipher algorithm.

Use the following CLI syntax to configure the log file encryption key and enable log file encryption, the encryption key is used for all local log files in the system.

classic CLI

configure log
    encryption-key key [hash | hash2 | custom]

MD-CLI

configure log
    encryption-key (plaintext | hashed-value)

Note:

The encrypted log files can be decrypted offline using the appropriate OpenSSL command:

openssl enc aes-256-ctr -pbkdf2 -d -in <log file encrypted> -out <output log file> -p -pass pass:<passphrase>

When an encrypted log file is opened in a text editor, editing or viewing the file contents is not possible, as the entire file is encrypted.