Technical Support might request debug level log files when troubleshooting an issue:
- Default logging has a value of 1
- Debug level logging requires a value of 2
Debug logging produces more log entries regarding all MA activity, regardless whether there is an error. Debug logging provides all communication details needed to troubleshoot common issues such as communication failures, updating failures, and policy management issues.
Guidance for enabling debug logging on non-Windows
- It is important to enable debug logging before trying to reproduce a problem. Enabling debug logging for an issue that cannot be reproduced does not provide adequate information for troubleshooting.
- If client and server issues are being investigated, you must enable debug logging on the client, and log level 8 on the ePO server, before you try to reproduce the problem. These actions are needed to successfully capture the additional logging that is required to help investigate the issue.
- The software IDs for MA for non-Windows are platform-specific.
McAfee Agent 5.x
MA 5.x loglevels are set using the
maconfig command. Maconfig is located in one of the following places:
Non-Windows platform |
Fixed path to maconfig |
Linux |
/opt/McAfee/agent/bin/ |
macOS |
/Library/McAfee/agent/bin/ |
To enable debug on agents 5.x, run maconfig with the following command:
maconfig -enforce -loglevel XX
Where
XX is the required loglevel.
The loglevels correspond to the following:
Info |
1 |
Info message mostly localized. |
Debug |
2 |
Debug logs for all components. |
Detail |
3 |
Additional trace logs for some components. |
Example command:
maconfig -enforce -loglevel 2
McAfee Agent 4.8
MA 4.8 logging levels are controlled by a setting in the
config.xml file:
- Edit the config.xml file:
Non-Windows platform |
Fixed path to config.xml with specific software ID |
AIX |
/etc/cma.d/EPOAGENT4000AIXX/config.xml |
HP-UX |
/etc/cma.d/EPOAGENT4000HPUX/config.xml |
Linux |
/etc/cma.d/EPOAGENT3700LYNX/config.xml |
Mac |
/etc/cma.d/EPOAGENT3700MACX/config.xml |
Solaris |
/etc/cma.d/EPOAGENT3700SLRS/config.xml |
To edit Config.xml using the VI editor:
- Type the following command and press ENTER:
vi /etc/cma.d/<SoftwareID>/config.xml
Where <SoftwareID> is the non-Windows software you are running (see the table above)
- To locate the appropriate section in the config.xml, type /DebugScript
- To edit the line for DebugScript, press and hold Shift+A, and change the 1 value to 2.
- Press Esc.
- Type :wq
For additional information about VI commands, see
KB59018.
- Restart the McAfee Agent process (required to enable debug logging on non-Windows):
- For AIX and HP-UX agents, type the following command and press ENTER:
/sbin/init.d/cma restart
- For Linux and Solaris agents, type the following command and press ENTER:
/etc/init.d/cma restart
- For Mac agents, type the following command and press ENTER:
SystemStarter restart cma
- Fully replicate the issue and capture information to the logs.
- Reset the logging level.
IMPORTANT: Follow the procedure in Step 1 and reset the logging level back to 1 after you have successfully replicated the issue and collected the logs. This reset avoids generating excessively large log files.