Knowledge Center

How to enable debug logging and log size for Orion.log in ePolicy Orchestrator
Technical Articles ID:   KB52369
Last Modified:  7/9/2018


McAfee ePolicy Orchestrator (ePO) 5.x, 4.x


You can set the log level to debug to collect more data when you are troubleshooting problems that relate to multiple ePO issues.
After debugging is enabled, Orion.log reports if the user is using an incorrect user name or password, any communication with the ePO database, and so on.
The Tomcat service (McAfee ePolicy Orchestrator 4.x Application Server or McAfee ePolicy Orchestrator 5.x Application Server) records information in Orion.log, which is located in the following folder appropriate for your version of Windows:
  • Windows 2012, Windows 2008: ...\Program Files(x86)\McAfee\ePolicy Orchestrator\Server\logs
  • Windows 2003: ...\Program Files\McAfee\ePolicy Orchestrator\Server\logs


Adjust the debug log level for Orion.log
  1. Open Windows Explorer and navigate to the appropriate following location based on your version of Windows (default path specified):
    • Windows 2012, Windows 2008: ...\Program Files(x86)\McAfee\ePolicy Orchestrator\Server\Conf\Orion
    • Windows 2003: ...\Program Files\McAfee\ePolicy Orchestrator\Server\Conf\Orion
  2. Right-click LOG-CONFIG.XML and select Edit to open the file in Notepad.
  3. Scroll down to the bottom of the file and locate the following section:

             <priority value ="warn" />
             <appender-ref ref="ROLLING" />
             <appender-ref ref="STDOUT"/>
  4. Change <priority value ="warn" /> to <priority value ="debug" />
    NOTE: If necessary, you can adjust the size of Orion.log by following steps 5 and 6 below. Skip to step 7 to keep the default size.


  5. Locate the appropriate line by searching for the term MaxFileSize.
  6. Change <param name="MaxFileSize" value="2MB"/> to <param name="MaxFileSize" value="20MB"/>
    NOTE: You can set a smaller value, for example 10MB or 15MB, if necessary.
  7. Click File, Save.
  8. Click File, Close.

Restart the Tomcat (ePO Application Server) service
McAfee recommends that you use the following procedure to automatically restart the service. However, note that debugging is enabled (after editing LOG-CONFIG.XML) within five minutes by default, even without restarting this service. Restarting the service automatically adjusts the log level.

  1. Click Start, Run, type services.msc, and then click OK.
  2. Right-click on either of the following services and select Restart:

    McAfee ePolicy Orchestrator x.x Application Server
  1. Close the services window.

Previous Document ID


Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.