Log
Logs: the system audit log, user login attempts with error codes, and the live RADIUS server log.

System Log
Log → System Log is the audit trail of the panel: who did what, and when. Every important action is recorded: logins, user changes, activations, deposits, profile and NAS changes, settings, exports and more.
Columns: Date, Event, Manager (who did it), Description, IP.
The Search box searches event, description and IP, for example a username.
Filters: Manager, Event (only events that exist in the log are listed), From / To Date.
Managers see the actions of themselves and their sub-managers; system administrators see all.
Export to Excel is available.
Useful events
Event
Meaning
manager/login, manager/loginAs
Panel logins and Login As.
user/create, user/update, user/delete, user/rename
User changes.
user/activate, user/extend, users/cancel
Activations, extensions and cancellations.
user/profile, user/expiration, user/disconnect, user/enable, user/disable
Profile changes, expiration edits, disconnects.
manager/deposit, manager/withdrawal, user/deposit, user/withdraw
Money movements.
bulkChanges
Bulk changes.
profile/*, nas/*, settings/*, service/*
Changes to profiles, NAS, settings and services.
security/violation
Someone tried an action without permission.
To find out who changed a user, search for the username. Long descriptions are shortened.
Required permission: Reports - System Log

User Auth Log and Login Errors
Log → User Auth Log ("Users Authentication Log") shows the latest login attempts of your users and the answer of SAS Radius. It is the first place to look when a user says "I can't connect".
Columns: Date, Username, Server Reply, NAS, MAC.
The Search box finds a username.
The log keeps only the most recent attempts (on busy servers, only the last minutes). For older events use the Sessions Report or the RADIUS Log.
Server replies and how to fix them
Depending on the case, the reply is shown as a code (for example 
over_expiration) or as text (for example user expired).
Reply
Meaning
Fix
Access-Accept / user authenticated successfully
Login accepted.
–
Access-Reject (without another reason)
Wrong password, or the username doesn't exist.
Check the password and username on the user's router. If username case sensitivity is enabled in Settings, check upper/lower case.
user_not_found / user not found
No user with this username.
Create the user or correct the username.
nas_not_found / nas not found
The router is not in the NAS list.
Add the NAS with the correct IP address.
user_disabled / user disabled
The user is disabled.
Enable the user.
profile disabled
The user's profile is disabled.
Enable the profile or change the user's profile.
over_expiration / user expired
The subscription has expired.
Activate or extend the user. To let expired users connect with limited access, see Setting Up Expired Users (Profiles chapter).
user_exceeded_download_limit / upload / traffic / uptime
The traffic or time quota is used up.
Renew, add traffic, sell an extension, or set a Quota Next Profile (FUP).
user_exceeded_daily_… / user exceeded allowed daily traffic limit
The daily limit is reached.
Wait until tomorrow, use Reset Traffic, or set a Daily Limit Next Profile.
exceeded_max_sessions / User exceeded max login sessions
The user already has as many open sessions as allowed. Often an old session that was not closed (router reboot, lost accounting).
Wait for the idle timeout or disconnect the old session; check that accounting works on the router; raise Simultaneous Sessions if needed.
invalid_mac / trying to log using invalid MAC
MAC Lock is on and the device MAC isn't allowed (often a new router).
Add the new MAC to Allowed MACs or turn off MAC Lock.
manager_nas_restriction
The user's manager is not allowed on this router (Allowed NAS(s)).
Add the NAS to the manager's Allowed NAS(s).
invalid_ppp_service
The PPPoE service name isn't in the manager's Allowed PPP Services.
Add the exact service name.
invalid_site_ppp_service
The PPPoE service isn't allowed for the user's site.
Fix the site's allowed services (watch for extra spaces).
ppp service required / hotspot service required
The profile allows only PPP, or only Hotspot.
Change the profile's Allowed Services, or connect with the right service.
user_overdue_invoices / User has overdue invoices
Postpaid user with an unpaid invoice past the grace period.
Pay the invoice, or check the Postpaid & Billing Settings.
Exceeded license users limit
More users than your license allows.
Delete unused users or upgrade the license.
license inactive
The license is not active.
Check Settings → License and contact Snono support.
Managers see the attempts of their own users. Attempts with unknown usernames are visible to system administrators.
Required permission: Report - Auth Log (Dialup)

RADIUS Log
Log → RADIUS Log ("FreeRADIUS Log") shows the RADIUS server log live: new lines appear as they are written. It is used for troubleshooting together with Snono support.
Only new lines from the moment you open the page are shown (no history).
Use the clear icon to empty the view.
Typical lines: login rejects with a reason (the same codes as in the User Auth Log and Login Errors), Timeout waiting for child or Ignoring duplicate packet (the server is overloaded or routers resend requests).
The page needs the Radius Log Monitor service (Tools → System Services). If you open the panel through a custom domain, the domain's web configuration must include the RADIUS log path. If the page stays empty, contact Snono support.
Required permission: Reports - Radius Log