Support Zip and Logging in Self-Hosted Firewall Enterprise Deployments
Self-hosted IQ Server records the requests it makes to public registries on behalf of Firewall Enterprise in a dedicated log and can package that log together with your Firewall Enterprise configuration into a support zip for Sonatype Support.
Firewall Enterprise Outbound Request Log
Requests IQ Server itself makes to public registries (e.g., retrieving npm or PyPI metadata) are written to firewall-enterprise-outbound-request.log, in the same log directory as the rest of IQ Server's logs and rotated alongside them. It is a separate file: these entries do not also appear in clm-server.log.
The log records only the requests that IQ Server makes, not the requests your repository manager makes to IQ Server. In practice that means metadata retrieval (e.g., npm packuments, PyPI Simple indexes, and the NuGet service index, registration documents, and V2 feed).
Note
An allowed component request is answered with a redirect, and your repository manager downloads the component directly from the public registry. IQ Server makes no outbound request in that case, so redirected component downloads produce no entry in this log.
Creating a Support Zip
Generate a support zip that includes database content using the API:
GET /rest/support?includeDb=true
curl -u "$USERNAME:$PASSWORD" \ "https://<your-iq>/rest/support?includeDb=true" > support.zip
Query parameter | Description |
|---|---|
| Include database content. Required for any Firewall Enterprise content. |
| Lift the per-file size limit on logs. Use only when Sonatype Support asks for it. |
Generating a support zip requires the Edit system configuration and users permission. Only one support zip can be generated at a time; a second request while one is in progress is refused until the first completes.