Which file would you inspect to gather logs for troubleshooting authentication issues on NetScaler?

• A. aaad.debug
• B. nslog file
• C. Dashboard
• D. nscon message

Answer: (B)

When diagnosing authentication problems on NetScaler, start with the logs that record authentication events and the interactions with identity sources. The nslog file is the central place NetScaler writes runtime events, including login attempts, failures, and messages from the AAA subsystem, LDAP/Radius authentication, and token validation. If you open nslog around the time a user tried to authenticate, you’ll typically see the sequence of events and any error codes or reasons for rejection, which helps pinpoint where the failure occurred.

You might hear about a more granular trace like aaaD debug, but the standard nslog is the primary source for general authentication troubleshooting because it captures the broader picture across components. The dashboard is a UI view and doesn’t provide the raw log details, while nscon messages are more about configuration and system messages rather than authentication events.

So, inspecting the nslog file is the best starting point for gathering logs to troubleshoot authentication issues. Try filtering for keywords like AUTH, AAA, LDAP, RADIUS, and the specific usernames or error strings around the incident time.