How to enable debug logging for MOVE Agentless and Multi-platform via the command line

Technical Articles ID: KB87799
Last Modified: 2023-11-08 07:49:14 Etc/GMT

Environment

Management for Optimized Virtual Environments (MOVE)
MOVE AntiVirus Agentless (MOVE AV Agentless) 4.x
MOVE AntiVirus Multi-platform (MOVE AV Multi-platform) 4.x
MOVE AV Agentless Security Virtual Machine (MOVE AV Agentless SVM)
MOVE AV Multi-platform Offload Scan Server (MOVE AV Multi-platform OSS)
MOVE Security Virtual Appliance (MOVE SVA)

For details of MOVE-supported environments, see KB74865 - Supported platforms for Management for Optimized Virtual Environments.

Summary

Best Practice advice for when to enable debug logging:

Enable debug logging for at least the first 24 hours during testing and pilot phases.
Enable debug logging before starting the removal or upgrade process of MOVE AntiVirus, so that it eases the process to troubleshoot any issues.

NOTE: More details can be found in the MOVE installation and product guides. For details, see the Product Documentation site.

Types of issues that require MOVE AV Multi-platform debug logging to be enabled:

High CPU OSS
Slow Logon (clients)
Poor performance (clients)
Third-party application performance issues

Types of issues that require MOVE AV Agentless debug logging to be enabled:

A connection between the ESX module and MOVE AV Agentless fails. Error messages on the MOVE SVA, related to out of memory or high CPU utilization [vShield Endpoint]
Out of memory: Kill process #### (mvsvc) [SVA]
Kernel panic [SVA]
Systems become unresponsive [SVA]

NOTE: MOVE Agentless investigation requires VMware Endpoint Severity (EPSec) debug logging. For details, see VMware Support for McAfee MOVE AntiVirus (Agentless).

Solution 1

Debug logging for MOVE AV Agentless:

Log on to the MOVE Agentless SVA Console:

logon: svaadmin
Password: <ENTER_PASSWORD>
Use the following commands to enable debug level logging:

sudo /opt/McAfee/move/bin/chloglevel DEBUG DEBUG DEBUG
[sudo] password for svaadmin: <ENTER PASSWORD>

NOTE: This command requires sudo permissions, and the MOVE services are restarted when it executes.
Perform the steps, and replicate the issue.
To disable debug level logging, type the following at the command prompt and press Enter:

sudo /opt/McAfee/move/bin/chloglevel WARN WARN WARN
[sudo] password for svaadmin: <PASSWORD>
To increase the log size and log file count, type the following:

/opt/McAfee/move/bin/chlogsize 20 20

Output: First 20 results show the log size, and the next 20 show the log numbers.

NOTE: Log size can be 10–20 MB, and the log number can be 3–20.

Solution 2

Debug Logging for MOVE AV Multi-platform:

At the command prompt, type the following command and press Enter:

mvadm loglevel enable <module_name> <log level types>

Examples:

mvadm loglevel enable SCAN ALL
mvadm loglevel enable ALL ALL

To disable debug logging, type the following at the command prompt and press Enter:

mvadm loglevel disable <module_name> <log level>

Examples:

mvadm loglevel disable SCAN ALL
mvadm loglevel disable ALL ALL

NOTE: This command deletes the specified log level types or all types for module MODULE_NAME or for all modules.

To set the debug log level back to default settings, type the following at the command prompt and press Enter:

mvadm loglevel disable ALL INFO DETAIL FNENTRY FNEXIT
To increase the log size and log file count, type the following:

mvadm config set LogFileSize=40

mvadm config set LogFileNum=10

General Multi-platform debug logging commands:

mvadm loglevel

NOTE: This command shows the current log level type.

mvadm status

NOTE: This command displays the current state of the MOVE AV client regarding its operational mode (enabled or disabled), and its MOVE AV Multi-platform OSS details.

Supported log level types:

Detail
Error
Fnentry
Fnexit
Info
System
Warning

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

How to enable debug logging for MOVE Agentless and Multi-platform via the command line

Environment

Summary

Solution 1

Solution 2

Affected Products

Languages:

Title

Title

Knowledge Center

How to enable debug logging for MOVE Agentless and Multi-platform via the command line

Environment

Summary

Solution 1

Solution 2

Affected Products

Languages:

Choose your region

Title

Title