Loading...

Knowledge Center


Data Collection - How to enable debug logging and log size for Orion.log in ePolicy Orchestrator
Technical Articles ID:   KB52369
Last Modified:  10/21/2019
Rated:


Environment

McAfee ePolicy Orchestrator (ePO) 5.x

Summary

You can set the log level to debug to collect more data when you are troubleshooting problems related to multiple ePO issues.

After debugging is enabled, Orion.log reports:
  • If the user is using an incorrect user name or password
  • Any communication with the ePO database
  • Anything that happens on the console
The Tomcat service (McAfee ePolicy Orchestrator 4.x Application Server or McAfee ePolicy Orchestrator 5.x Application Server) records information in Orion.log, which is located in the \Server\logs folder.

IMPORTANT: Make sure that you disable the debug log setting after troubleshooting and log collection.

Solution

Enable debug log level logging for the Orion.log:
  1. Open Windows Explorer and navigate to <ePO_Install_Directory>\Server\conf\orion.
  2. Right-click LOG-CONFIG.XML and click Edit to open the file in Notepad.
  3. Scroll down to the bottom of the file and locate the following section:

    -->
        <root>
             <priority value ="warn" />
             <appender-ref ref="ROLLING" />
             <appender-ref ref="STDOUT"/>
        </root> 
     
  4. Change <priority value ="warn" /> to <priority value ="debug" />.
     
    NOTE: If needed, you can adjust the size of Orion.log by following steps 5 and 6. Skip to step 7 to retain the default size.
     
  5. Locate the appropriate line by searching for the term MaxFileSize.
  6. Change <param name="MaxFileSize" value="2MB"/> to <param name="MaxFileSize" value="20MB"/>.
     
    NOTE: You can set a smaller or higher value, for example 10 MB or 80 MB, if needed.
     
  7. Click File, Save.
  8. Click File, Close.
     

Restart the Tomcat (ePO Application Server) service
McAfee recommends that you use the following procedure to automatically restart the service. But, note that after editing LOG-CONFIG.XML, debugging is enabled within a few minutes by default, even without restarting this service. Restarting the service automatically adjusts the log level.

  1. Click Start, Run, type services.msc, and then click OK.
  2. Right-click on either of the following services and select Restart:

    McAfee ePolicy Orchestrator x.x Application Server
  1. Close the services window.
 
Disable debug log level logging:
Only complete these steps after you capture the data for troubleshooting.
  1. Open Windows Explorer and navigate to <ePO_Install_Directory>\Server\conf\orion.
  2. Right-click LOG-CONFIG.XML and click Edit to open the file in Notepad.
  3. Scroll down to the bottom of the file and locate the following section:

    -->
        <root>
             <priority value ="warn" />
             <appender-ref ref="ROLLING" />
             <appender-ref ref="STDOUT"/>
        </root> 
     
  4. Change <priority value ="debug" /> to <priority value ="warn" />.
  5. Locate the appropriate line by searching for the term MaxFileSize.
  6. Change <param name="MaxFileSize" value="20MB"/> to <param name="MaxFileSize" value="2MB"/>.
  7. Click FileSave.
  8. Click FileClose.
  9. Restart the Tomcat (ePO Application Server) service, using the previous procedure. 

    NOTE: After editing LOG-CONFIG.XML, the changes take effect within few minutes by default, even without restarting this service.

Previous Document ID

615070

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.