> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/knowledge-base/english/logging/how-can-i-retrieve-the-logs-of-the-enginsight-component-hacktor.md).

# How can I retrieve the logs of the Enginsight component Hacktor?

The Hacktor is an Enginsight component that is installed as a service in a network segment to perform penetration tests on assets based on specific checks.

There are two ways to read the logs of an installed Hacktor: via the Enginsight platform or directly on the Linux server on which the Hacktor is installed.

***

## Retrieving Hacktor Logs via the Platform

Log in to the Enginsight platform and navigate to **Penetration Tests** → **Required Services** → [Hacktors](https://docs.enginsight.com/docs/manual/english/platform-usage/penetration-testing/required-services/hacktors) to show an overview of all installed Hacktors.

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-file-lines">:file-lines:</i> **Get logs** at the end of a list item to download the Hacktor logs as a **txt.gz** file.

<div align="left"><figure><img src="/files/qwz3BQD12uM7NikAKaYm" alt=""><figcaption></figcaption></figure></div>

{% hint style="info" %}
You can find the exported file in the default download location of your browser.
{% endhint %}

***

## Retrieving Hacktor Logs Directly on the Server

Depending on the operating system used, different options are available.

### Debian 12 and Later Versions

From Debian 12 onward, system logs are managed via `journalctl` by default. Logs from Enginsight components are therefore no longer written to the classic syslog.

You can display or save Hacktor logs using one of the following commands:

**Displaying logs**:

```
sudo journalctl -u ngs-hacktor -n 50
```

**Saving logs**:

```
sudo journalctl -u ngs-hacktor -n 50 > /tmp/ngs-hacktor.log
```

{% hint style="info" %}
These commands display or save **the last 50 log entries**. Adjust the number `50` if you want to view more log entries.
{% endhint %}

### Older Debian Versions and CentOS

On older systems, logs are still written to the classic syslog.

You can save Hacktor logs as a **.txt** file using one of the following commands:

#### Debian

```
cat /var/log/syslog | grep -a hacktor-m24 > /tmp/<CustomFileName>.txt
```

#### CentOS

```
cat /var/log/messages | grep -a hacktor-m24 > /tmp/<CustomFileName>.txt
```

{% hint style="info" %}
Remember to replace `<CustomFileName>` with a file name of your choice.
{% endhint %}

***