How to enable debug logging in the Orion.log
Last Modified: 2022-03-01 18:48:31 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
How to enable debug logging in the Orion.log
Technical Articles ID:
KB52369
Last Modified: 2022-03-01 18:48:31 Etc/GMT EnvironmentePolicy Orchestrator (ePO) 5.x
Summary
You can set the log level to debug to collect more data when you are troubleshooting problems related to multiple ePO issues. After debugging is enabled, the
IMPORTANT: Make sure that you disable the debug log setting after you troubleshoot and collect logs. The instructions differ based on the version of ePO you are using. Make sure you follow the correct solution based on your ePO version. Solution 1Instructions for ePO 5.10 Update 10 and earlier:
IMPORTANT: If you are using ePO 5.10 Update 5 or later, it is recommended that you adjust the log level using the User Interface the instructions in Solution 3. Enable debug log level logging for the
Disable debug log level logging:
Only complete these steps after you capture the data for troubleshooting.
Solution 2
Instructions for ePO 5.10 Update 11 and later IMPORTANT: If you are using ePO 5.10 Update 5 or later, it is recommended that you adjust the log level using the User Interface the instructions in Solution 3. Enable debug log level logging for the
Disable debug log level logging: Only complete these steps after you capture the data for troubleshooting.
<SizeBasedTriggeringPolicy size="64M"/> </Policies> <DefaultRolloverStrategy max="13"/>
Solution 3
A new user-friendly graphical interface has been introduced in ePO 5.10 Update 5 and later. It can be used to modify the log-config.xml, as explained above. To access the interface, go to the following URL on your ePO server: Where:
Technical Support might provide you specific loggers to debug different extensions. You can debug by clicking the '+' symbol, and adding the logger provided by support. Related InformationNOTE: For more information about how to enable other debugging, see your ePO product documentation.
For product documents, go to the Product Documentation portal.
Common search terms to find this article: ePO Data Collection, Diagnostic Data Collection Previous Document ID (Secured)
615070
Affected ProductsLanguages:This article is available in the following languages: |
|