Skip to main content
Migration Notice
We're migrating documentation from the old portal into this one. Some things may look a little different or out of place in the meantime — we know, and we're working to get it right. If something's unclear or doesn't look right, let us know.

Vault Agents — Logs

Overview​

The Logs tab manages vault agent log delivery and verbosity. All log archives are transferred over the Quantum Trust Domain (QTD) channel — encrypted end-to-end with ML-KEM-1024 before leaving the vault network.

info

Heartbeat interval is configured per-agent directly on the Dashboard tab — click Set on the agent card to change it.

Vault Agent Logging Configuration​

Controls log verbosity and how often agents automatically upload compressed log archives to the console.

SettingDescriptionDefault
Log LevelVerbosity: DEBUG (most), INFO, WARN (least).INFO
Log Upload Interval (min)How often (in minutes, 1–1440) the agent uploads its zipped logs to the console. The agent zips and encrypts on every heartbeat cycle but only uploads when this interval has elapsed since the last upload. Set to 1 for real-time delivery during troubleshooting.60 min
Log Retention (days)How many days of vault log archives to keep on the console before pruning (1–90).7 days

Click Save Settings to apply. Settings are delivered to all registered vault agents inside their next encrypted heartbeat response (HEARTBEAT_CONFIG QTD record); the agent applies them immediately — no restart needed.

info

QTD Encryption: Archives are encrypted with ML-KEM-1024 (post-quantum KEM) inside the vault network using the console's public key. The console decrypts them with its private identity key. No plaintext log data traverses the network.

Heartbeat interval is configured per-agent on the Dashboard sub-tab — open it and edit the heartbeat field in each agent card. The Logs sub-tab no longer hosts that control.

Where to See Upload History​

Log archive deliveries are recorded as LOG_UPLOAD QTD messages. Open the Quantum Trust Protocol Audit Log tab and filter Type > Log Upload to see every archive received across the fleet, with QTP Msg ID (QTP: Quantum Trust Protocol), status pipeline, and timestamp. (The dedicated "QTD Log Upload History" table that used to live on this sub-tab was retired; the audit log is now the single source of truth.)

Viewing Logs​

Downloaded log archives are stored on the console at:

/data/logs/agents/{agent-id}/

This is the logs/agents/{agent-id}/ folder in the console's data directory. Console backups include this folder.

Each file is a .zip archive containing the vault agent's rolling log files at the time of collection.

To view vault agent activity in real time, SSH to the vault host:

journalctl -u argus-vault-agent -f

Vault agent activity (airgap open/close, sync job triggers, heartbeats) is also recorded in the Vault Activity tab.