Delete OpenVPN Access Server Logs

To remove logs of OpenVPN Access Server, several methods can be employed, depending on the specific logs targeted and the desired outcome.

1. Wiping the Log Database:

The primary method for deleting session-related logs, including connection times, user information, and bandwidth usage, is to wipe the log database using the logdba script.

 sudo /usr/local/openvpn_as/scripts/logdba --wipe

2. Removing Specific Log Entries from the Database:

If the goal is to remove specific types of log entries, such as those related to XML_API or local_root events, direct SQL commands can be executed against the log.db database.

sqlite3 /usr/local/openvpn_as/etc/db/log.db 'delete from log where service="XML_API";'
sqlite3 /usr/local/openvpn_as/etc/db/log.db 'delete from log where username="local_root";'

3. Disabling Logging:

To prevent future logging, audit and service logging can be disabled by modifying the as.conf file. To turn off audits:

Open /usr/local/openvpn_as/etc/as.conf for editing.

Comment out the log_db line by adding a # at the beginning: # log_db=…
Save and exit.
Restart the OpenVPN Access Server service:

systemctl restart openvpnas

To turn off service logging:

Open /usr/local/openvpn_as/etc/as.conf for editing.

Add the line: log.disable_logging=true
Save and exit.

Restart the OpenVPN Access Server service:

systemctl restart openvpnas