This article describes how to enable DAT reputation logging for ENS Threat Prevention for troubleshooting purposes.
The
mcdatrep.exe process collects health information such as the
AMCore version, DAT version, and operating system version. It sends this information in telemetry using the
TrustedSource library. The logging allows
mcdatrep.exe to trace errors if there's a connection issue that stops telemetry.
To enable DAT reputation logging:
- Disable Access Protection and Self-Protection.
- Create a text file named mcdatrep.txt in the same directory where mcdatrep.exe resides (C:\Program Files\CommonFiles\McAfee\Engine\scanners\x86_64\datrep\1.0.x.xxx). Enter the following contents into the file:
/logfile=c:\temp\datbitlog.txt
- Enable Access Protection and Self-Protection.
Now any execution of
mcdatrep.exe appends the traces to the file path passed to the switch /logfile. In the above example, the
datbitlog.txt trace log file is created in the
c:\temp folder.
Trigger a
mcdatrep periodic health check to run:
- Start Windows Task Scheduler. Press Windows+R, type taskschd.msc, and click OK.
- Navigate to Task Scheduler (Local), Task Scheduler Library, right-click the task named McAfee DAT Built in test, and click Run.
When the health check is done, the
Last Run Time for the task is updated to the current time. This update creates the
datbitlog.txt trace log file in the
c:\temp folder.
