Host IPS 8.0 logging for non-Windows clients
Technical Articles ID:
KB53490
Last Modified: 11/13/2020
Last Modified: 11/13/2020
Host IPS 8.0 logging for non-Windows clients
Technical Articles ID:
KB53490
Last Modified: 11/13/2020 EnvironmentMcAfee Host Intrusion Prevention (Host IPS) 8.0
Sun Solaris Red Hat Linux SUSE Linux Summary
Enable or disable logging To enable or disable logging, use the NOTE: The debug log setting only affects the HipShield.log and HipClient.log files. Available commands:
NOTE: Logging must never be enabled for long periods of time. The log files can grow without limit and have adverse effects.
The following log files are in:
Log File Rotation for Unix Host Intrusion Prevention Agents: Log file rotation for UNIX is controlled by the entries NOTE: The log file rotation setting only affects the After the specified size is exceeded, the file is closed and renamed with the suffix ".1". If a file with that name exists, the suffix is incremented by one, with the highest number specified in the variable log_rotate_count. When the specified number of backup files is reached, the oldest is deleted.
Example: When the log file HipShield.log reaches the threshold size, it is renamed as HipShield.log.1. If a file with that name exists, the new file gets named as HipShield.log.2. To enable rotation:
Enable Message Type logging You can enable or disable message types when logging is enabled. Nearly every line written to one of the log files begins with a time stamp and a message type. For example: The type of this message is INFO, and can be enabled by using the following NOTE: This command enables INFO type messages in all log files. The message types supported by non-Windows Host IPS clients are:
This setting can be enabled by using the following hipts logging on These commands enable DEBUG type messages for all log files. NOTE: Logging must never be left enabled for long periods of time. Previous Document ID
616314
Affected ProductsGlossary of Technical Terms |
|