Knowledge Center

How to enable debug logging for McAfee Agent for non-Windows troubleshooting
Technical Articles ID:   KB69542
Last Modified:  4/19/2018


McAfee Agent (MA) 5.x, 4.8


Technical Support might request debug level log files when troubleshooting an issue:
  • Default logging has a value of 1
  • Debug level logging requires a value of 2
Debug logging produces more log entries regarding all MA activity, regardless whether there is an error. Debug logging provides all communication details needed to troubleshoot common issues such as communication failures, updating failures, and policy management issues.  
Guidance for enabling debug logging on non-Windows
  • It is important to enable debug logging before trying to reproduce a problem. Enabling debug logging for an issue that cannot be reproduced does not provide adequate information for troubleshooting.
  • If client and server issues are being investigated, you must enable debug logging on the client, and log level 8 on the ePO server, before you try to reproduce the problem. These actions are needed to successfully capture the additional logging that is required to help investigate the issue.
  • The software IDs for MA for non-Windows are platform-specific.

McAfee Agent 5.x
MA 5.x loglevels are set using the maconfig command. Maconfig is located in one of the following places:
Non-Windows platform Fixed path to maconfig
Linux /opt/McAfee/agent/bin/
macOS /Library/McAfee/agent/bin/

To enable debug on agents 5.x, run maconfig with the following command:

maconfig -enforce -loglevel XX
Where XX is the required loglevel.

The loglevels correspond to the following:
Info 1 Info message mostly localized.
Debug 2 Debug logs for all components.
Detail 3 Additional trace logs for some components.

Example command:
maconfig -enforce -loglevel 2

McAfee Agent 4.8
MA 4.8 logging levels are controlled by a setting in the config.xml file:
  1.  Edit the config.xml file:
Non-Windows platform Fixed path to config.xml with specific software ID
AIX /etc/cma.d/EPOAGENT4000AIXX/config.xml
HP-UX /etc/cma.d/EPOAGENT4000HPUX/config.xml
Linux /etc/cma.d/EPOAGENT3700LYNX/config.xml
Mac /etc/cma.d/EPOAGENT3700MACX/config.xml
Solaris /etc/cma.d/EPOAGENT3700SLRS/config.xml

To edit Config.xml using the VI editor:
  1. Type the following command and press ENTER:

    vi /etc/cma.d/<SoftwareID>/config.xml

    Where <SoftwareID> is the non-Windows software you are running (see the table above)
  2. To locate the appropriate section in the config.xml, type /DebugScript
  3. To edit the line for DebugScript, press and hold Shift+A, and change the 1 value to 2.
  4. Press Esc.
  5. Type :wq
For additional information about VI commands, see KB59018.
  1. Restart the McAfee Agent process (required to enable debug logging on non-Windows):
  • For AIX and HP-UX agents, type the following command and press ENTER:

/sbin/init.d/cma restart

  • For Linux and Solaris agents, type the following command and press ENTER:

/etc/init.d/cma restart

  • For Mac agents, type the following command and press ENTER:

SystemStarter restart cma

  1. Fully replicate the issue and capture information to the logs.
  2. Reset the logging level.

    IMPORTANT: Follow the procedure in Step 1 and reset the logging level back to 1 after you have successfully replicated the issue and collected the logs. This reset avoids generating excessively large log files.

Rate this document


This article is available in the following languages:

English United States

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.