Loading...

Knowledge Center


How to generate the MOVE AV AntiVirus Agentless MER file
Technical Articles ID:   KB80097
Last Modified:  6/17/2019
Rated:


Environment

McAfee Management for Optimized Virtual Environments (MOVE)
McAfee MOVE AntiVirus (AV) Agentless 4.x, 3.6.x
McAfee MOVE AV Agentless Security Virtual Appliance (SVA) 3.6.0 and earlier
McAfee MOVE AV Agentless Security Virtual Machine (SVM) 3.6.1 and later

For details of MOVE supported environments, see KB74865.

Summary

Perform the steps in this article to generate the MOVE SVA/SVM Minimum Escalation Requirements (MER) file.

For customer escalations, the MOVE AV Agentless MER tool must be used to collect all relevant DEBUG level logs and system information from the SVA.

Solution

Enable DEBUG level logging, reproduce the issue, and run the MER tool.
  1. Log on to the MOVE Agentless SVA/SVM console:

    login: svaadmin
    password: <ENTER_PASSWORD>
     
  2. Enable DEBUG level logging using the following commands:

    sudo /opt/McAfee/move/bin/chloglevel DEBUG DEBUG DEBUG
    [sudo] password for svaadmin: <ENTER PASSWORD>

    NOTE:
    This command requires sudo privileges and the MOVE services will be restarted.

    Alternatively, if a user is already within the /opt/McAfee/move/bin folder, use the command:

    ./chloglevel DEBUG DEBUG DEBUG 
     
  3. Perform the necessary steps to replicate the issue that is being investigated.
  4. Run the MOVE AV Agentless MER tool using the following command:

    sudo /opt/McAfee/move/bin/move-av-agntls-mer

    Alternatively, if a user is already within the /opt/McAfee/move/bin folder, use the command:

    ./move-av-agntls-mer

    NOTES: 
    • The results of the MER tool are located in a single file in the /opt/McAfee/move/log/ directory, and include MOVE AV Agentless logs as well as McAfee Agent logs and other system information.
    • The MOVE Agentless MER tool will ask if the user would like to upload the MER file to a remote Windows shared directory. To do this, you must provide the following information: 
  • Remote IP address for Windows share, using forward slash (Example: '//192.168.44.54/share-name')
  • Domain 
  • Username  
  • Password
After the file transfer is complete, the MER file will be saved on the specified share as:
move-av-agntls-mer.tar.gz
  1. Disable DEBUG level logging:

    sudo /opt/McAfee/move/bin/chloglevel WARN WARN WARN
    [sudo] password for svaadmin: <ENTER PASSWORD>
     
     

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.