User manual MCAFEE EPOLICY ORCHESTRATOR 4.0 LOG FILES FOR TROUBLESHOOTING

[. . . ] License Attributions Refer to the product Release Notes. 2 Using Log Files for Troubleshooting in ePolicy Orchestrator 4. 0 Contents Troubleshooting with Log Files. 11 Logging agent updating and deployment scripts. 12 Using Log Files for Troubleshooting in ePolicy Orchestrator 4. 0 3 Troubleshooting with Log Files ePolicy Orchestrator includes many log files that you can use for troubleshooting. This document describes how to use the log files and provides the following information: · Name and location of log files. [. . . ] For example, when AGENT_<SYSTEM>. LOG reaches it maximum size, its name becomes AGENT_<SYSTEM>_BACKUP. LOG. If a BACKUP log already exists, it is overwritten. Depending on how recently the BACKUP was created, it may contain current entries. Examine both log files to ensure comprehensiveness. To change the size, create the DWORD value LOGSIZE in the registry key HKEY_LOCAL_MACHINE\SOFTWARE\NETWORK ASSOCIATES\EPOLICY ORCHESTRATOR, then set the value data to the size desired. For example, 2=2MB. 6 Using Log Files for Troubleshooting in ePolicy Orchestrator 4. 0 Troubleshooting with Log Files Typical issues addressed by logs Typical issues addressed by logs Table 3 identifies the types of issues recorded in each ePolicy Orchestrator 4. 0 log file. Table 3: Typical issues and the log files to consult For issues with. . . Agent: in general; client communication tasks See these log files AGENT_<SYSTEM>. LOG, AGENT_<SYSTEM>_BACKUP. LOG FRMINST_<SYSTEM>. LOG EPOAPSVR. LOG UPDATERUI_<SYSTEM>. LOG EPOAPSVR. LOG SERVER. LOG SQL2K5bCINST. LOG Agent: installation; uninstallation Agent: push Agent: updating client, managed products Agent: wake-up Agent-server communication Backward Compatibility for SQL (if installed during ePolicy Orchestrator installation) Client tasks: communication AGENT_<SYSTEM>. LOG AGENT_<SYSTEM>_BACKUP. LOG PRDMGR_<SYSTEM>. LOG PRDMGR_<SYSTEM>_BACKUP. LOG PRDMGR_<SYSTEM>. LOG PRDMGR_<SYSTEM>_BACKUP. LOG, MCSCRIPT. LOG AGENT_<SYSTEM>. LOG, SERVER. LOG, SERVER_BACKUP. LOG REPLICATION. LOG, EPOAPSVR. LOG, ORION. LOG ERRORLOG. <CURRENT_DATETIME> STDERR. LOG, JAKARTA_SERVICE_<DATE>. LOG, LOCALHOST_ACCESS_LOG. <DATE>. TXT EVENTPARSER. LOG, EVENTPARSER_BACKUP. LOG CORE-INSTALL. LOG, ENV-CORE-INSTALL. LOG, EPO-INSTALL. LOG, ENV-TOMCAT-INSTALL. LOG EPO400COMMONSETUP. LOG EPO400-INSTALL-MSI. LOG ORION. LOG LICENSING. LOG MIGRATION. LOG, EPO400-INSTALL-MSI. LOG ORION. LOG PRDMGR_<SYSTEM>. LOG, PRDMGR_<SYSTEM>_BACKUP. LOG Client tasks: scripts Communication: client-server Distributed repositories Error: Apache web server Error: Tomcat servlet container Events, event update Installation: ePolicy Orchestrator calls to background, foundation, or other platforms and technologies Installation: ePolicy Orchestrator custom actions Installation: ePolicy Orchestrator Interface: Issues arising after changes to. . . License Migration: from earlier version Notifications Plug-in files Using Log Files for Troubleshooting in ePolicy Orchestrator 4. 0 7 Troubleshooting with Log Files Logging levels for debugging For issues with. . . Policies See these log files AGENT_<SYSTEM>. LOG, AGENT_<SYSTEM>_BACKUP. LOG, SERVER. LOG <AGENTGUID>-<TIMESTAMP>. XML (if registry value has been set) SERVER. LOG EPOAPSVR. LOG, ORION. LOG, REPLICATION. LOG EPOAPSVR. LOG EPOAPSVR. LOG, ORION. LOG, REPLICATION. LOG AGENT_<SYSTEM>. LOG MCSCRIPT. LOG SERVER. LOG, SERVER_BACKUP. LOG, ORION. LOG EPO400COMMONSETUP. LOG, EPO400-INSTALL-MSI. LOG AGENT_<SYSTEM>. LOG, AGENT_<SYSTEM>_BACKUP. LOG UPDATERUI_<SYSTEM>. LOG <AGENTGUID>-<TIMESTAMP>. XML (if registry value has been set) MIGRATION. LOG, EPO400-INSTALL-MSI. LOG ORION. LOG Policy update Product property update Pull Push agent Replicate Script: client task Scripts: engine; messages Server: in general Server: installation Updating Upgrading: from earlier version User interface: HKEY_LOCAL_MACHINE\SOFTWARE\NETWORK ASSOCIATES\EPOLICY ORCHESTRATOR, issues arising after changes to. . . Logging levels for debugging This section provides information about setting logging levels for logs in general. For information about adjusting the logging of the Tomcat servlet container, see Adjusting the Tomcat log level. The scope and depth of the information in most log files are determined by the log level, a value ranging from 1 to 8. · Messages logged at each level include all messages at the current level and all lower logging levels. · The default value is 7, generally considered adequate for ordinary debugging. · Log level 8 produces output, including every SQL query, whether or not there is an error. · When a setting is changed using the registry, the interval is usually a minute or less. The DWORD registry value that controls logging is: HKEY_LOCAL_MACHINE\SOFTWARE\NETWORK ASSOCIATES\EPOLICY ORCHESTRATOR\LOGLEVEL. · When a setting is changed in an INI file or an XML file, the change usually takes effect immediately. · In some instances, when a change takes effect upon restarting the system, the user controls the interval. Table 6: When log setting changes take effect Log file name AGENT_<SYSTEM>. LOG CORE-INSTALL. LOG EPOAPSVR. LOG EPO400COMMONSETUP. LOG Setting change takes effect. . . Within one minute Cannot change Within one minute Immediately upon saving change to EPO400-DEBUG. INI, located at <CURRENT USER'S TEMP DIRECTORY>\NAILOGS Cannot change Immediately upon saving change to EPO400-DEBUG. INI, located at <CURRENT USER'S TEMP DIRECTORY>\NAILOGS Upon startup Within one minute Upon startup Upon startup of Tomcat service Cannot change Upon startup of Tomcat service Upon startup Upon startup of Tomcat service Within one minute Within one minute Upon startup Cannot change Cannot change EPO-INSTALL. LOG EPO400-INSTALL-MSI. LOG ERRORLOG<CURRENT_DATETIME> EVENTPARSER. LOG FRMINST_<SYSTEM>. LOG JAKARTA_SERVICE_<DATE>. LOG LICENSING. LOG LOCALHOST_ACCESS_LOG. <DATE>. TXT MCSCRIPT. LOG ORION. LOG PRDMGR_<SYSTEM>. LOG REPLICATION. LOG SERVER. LOG, SERVER_BACKUP. LOG SQL2K5bCINST. LOG STDERR. LOG 10 Using Log Files for Troubleshooting in ePolicy Orchestrator 4. 0 Troubleshooting with Log Files Adjusting the Tomcat log level Log file name UPDATERUI_<SYSTEM>. LOG Setting change takes effect. . . Within one minute Adjusting the Tomcat log level The file name of the Tomcat log is ORION. LOG. [. . . ] This file is not intended for debugging, but as information for users not likely to be troubleshooting. Messages of type "x" (logging level 4) can be included in the activity log. For information on setting levels, see Logging levels for debugging. Information in the activity log also appears in the Agent Monitor. [. . . ]