Hello: I am trying to troubleshoot why my Opnsense keeps crashing. I am not sure which log files to look in to find the cause of the crash. Would someone kindly point me in the right direction?
You will need a swap partition in order to see kernel crashes getting logged.
Check if you have a swap by executing (only a swap on persistent storage will work):
swapctl -l
If you mean other kind of software crashes, like services maybe crashing in the background (aka not a kernel crash), then you might take a look at the log files. For example System -> Log Files -> General
I have a swap of the default size durring intall. Which log file would I check for kernal crash. My system restarts sometimes every day or every fer days sometimes twice day since last update. I did a system health check and everything looks good.
It's important the swap is on persistent storage like:
Device: 1024-blocks Used:
/dev/gpt/swapfs 8620216 0
What is your output of the command I gave you earlier?
If there is really a kernel crash happening, and the crash gets logged to the swap partition, after an automatically system restart the kernel crash report should be visible at: System -> Firmware -> Reporter.
If you see "No issues were detected.", there has been no kernel crash. Or the kernel crash was not stored on your swap partition.
This is the output.
Device: 1024-blocks Used:
/dev/ada0s1b 4194304 0
This was the swap set up during the install of Opnsense.
There was a crash report. I submitted it.
You're not alone. I also have kernel crashes.. https://forum.opnsense.org/index.php?topic=45138.msg225446#msg225446