ccg.log viewer

SailPoint ISC Virtual Appliance connector log viewer. Parsed locally in your browser; nothing is uploaded.

Help

What this is

A readable viewer for SailPoint ISC Virtual Appliance ccg.log files. Everything is parsed by JavaScript in your browser; log files never leave your machine, whether this page was opened from disk or from a website.

Loading logs

  • Drag and drop one or more files onto the drop zone, or click it to choose files. Several files (for example rotated logs like ccg.log.1) are merged in time order. Drag-drop cannot be refreshed automatically; re-drop to reload.
  • Open folder (Edge/Chrome only) lets you pick a folder once; the viewer then reads every ccg*/*.log file in it and supports Refresh and auto-refresh.
  • Load from VA (agent) fetches the log from the companion agent (see below) running on a machine that can reach the VA.

Refresh and auto-refresh

Once a folder or the VA agent is the source, use Refresh to reload on demand, or the Auto dropdown (15s/30s/60s) to poll automatically. An "updated HH:MM:SS" stamp confirms each refresh. If a quick range (see below) is active, it slides forward on each refresh so new lines keep appearing; a From/To window you typed by hand stays fixed.

Timestamps, ordering, filters

  • Times show in your local time zone by default; the Times button toggles to UTC. Filtering (From/To, quick ranges) is always in UTC, matching the raw log.
  • Newest entry shows first by default; the order button flips to oldest-first.
  • Filter by level (ERROR/WARN/INFO/other) and free text, which also searches inside decoded stack traces.
  • Quick ranges: durations (15m-24h) and calendar presets (today/yesterday/this week/this month, using your local day boundary). Relative to chooses whether durations count back from the newest loaded entry (right for a copied log) or the current time (right for a live tail).

Stack traces

Escaped stack traces, including ones nested inside a stringified JSON field (for example an exception field holding {"stacktrace":"...\n\tat..."}), are decoded to readable multi-line text when you expand an entry. A Copy button on the expanded entry copies the decoded text to the clipboard. Entries with a trace show a "stack" badge in the list.

Selecting and copying entries

Tick the checkbox on a row to select it; Shift-click another checkbox to select the whole range between. The Select all checkbox in the bar above the log selects every filtered entry. When anything is selected, that bar shows Copy with a format selector, Readable (decoded), Raw (original lines), or Compact (timestamp | level | message), and a Clear button (Ctrl+C also copies). The same copy and export controls are in the Controls drawer. Clicking a row (not its checkbox) expands its detail.

Export

Export the currently filtered entries as .txt (decoded, readable) or .json, for example to attach a slice to a support case.

Appearance and layout

  • The Theme button cycles System (follow your OS) / Light / Dark.
  • The everyday controls (level filters, search, time ranges, refresh) are always in the top bar. The menu button (top-left) opens a Controls drawer with the rest: loading a source, view toggles, and export/copy.
  • When Auto refresh is on, a "next in Ns" indicator and a depleting bar under the toolbar show the time to the next refresh.
  • Your theme and collapsed-section choices are remembered in the browser for next time.

Getting ccg.log off the VA

Copy the log with scp (prompts for the VA password; add -i <key> to use a key instead):

scp <va-user>@<va-host>:/home/sailpoint/log/ccg.log C:\logs\va\

# current log plus rotated files
scp "<va-user>@<va-host>:/home/sailpoint/log/ccg.log*" C:\logs\va\

Then use Open folder on that destination folder. A GUI client such as WinSCP works the same way with a username and password.

Using an SSH key instead of a password

Generate a keypair on your own machine (not the VA); only the public half is copied to the VA, and the private half is what you pass to -i:

ssh-keygen -t ed25519 -C "isc-log-correlator" -f C:\Users\you\.ssh\va_key
type C:\Users\you\.ssh\va_key.pub | ssh <va-user>@<va-host> "umask 077; mkdir -p ~/.ssh; cat >> ~/.ssh/authorized_keys"
ssh -i C:\Users\you\.ssh\va_key <va-user>@<va-host> "head /home/sailpoint/log/ccg.log"

If the VA rejects the key (some are locked down), use password auth instead. Full details, including Windows key-file permissions, are in the project README.

Live view from the VA (companion agent)

A browser page cannot open an SSH connection, so a small companion agent does it and serves the log to this viewer. Two downloads in the Controls drawer:

  • Download agent: small zip for machines that already have Python 3.10+.
  • Download agent (portable): includes Python, so it runs on machines where nothing can be installed. No admin rights needed.

Unzip, then double-click start-agent.bat. On first run it asks for the VA host, SSH user, and your SSH key file path (the agent runs unattended, so it needs key authentication; the key setup commands are above and in README-agent.txt). It then opens the viewer in your browser automatically, with Refresh and Auto keeping the log current. Use the agent's own http://localhost:8765/... URL, not an https:// website; browsers block an https page from calling an http agent.

Privacy and security notes

  • Log content is never uploaded; a hosted copy of this page serves only the empty viewer.
  • The companion agent binds to 127.0.0.1 only and requires its printed access token, so another website cannot read your VA logs through it.
No logs loaded
Time (UTC)
No logs loaded
Drop ccg.log files anywhere here, or load a source:
More options (view, export, download the agent) are in Controls, the menu button at the top-left.
Working...
No entries match the current filters.