Workflow of Single System Troubleshooting (SST) feature of Trellix Agent
Technical Articles ID:
KB96404
Last Modified: 2023-03-14 11:07:48 Etc/GMT
Last Modified: 2023-03-14 11:07:48 Etc/GMT
Environment
ePolicy Orchestrator (ePO) 10.x
Trellix Agent (TA) 5.7.x
Trellix Agent (TA) 5.7.x
Summary
The following steps detail the workflow of the Single System Troubleshooting (SST) feature of TA.
Step 1: What's SST and how to enable this option using the TA Policy?
You can view the TA logs of a managed system from the ePO console remotely for troubleshooting.
You can enable remote logging by enabling the Enable Remote Logging option under Policy Catalog, Trellix Agent, General, Logging.
The default line limit for the remote log is 200 and can go up to 5,000.
Under Remote Logging, select Enable remote Logging to enable this SST to work.
Step 2: How to view the log from the ePO console and steps to download the TA logs from the ePO console.
Once the policy is enabled with remote logging and the policy is enforced to the client, perform the following steps:
Issues / Errors
The SST option shows the errorThe selected system cannot use this feature as the system is not connected to ePO similar to that shown in the image below.
The possible causes for this error message are as follows:
The relevant logs from ePO and the Client with log names and the detailed log content are discussed below.
The client side log name isMASVC_systemname.log
Path:C:\programdata\mcafee\agent\logs\
To enable debug logging for TA, see KB82170 - How to enable debug logging for McAfee Agent to troubleshoot Windows.
The ePO server side logs areorion.log and server_systemname.log
Path forOrion.log : <ePO installed folder>\server\logs
To enable debug logging forOrion.log , see KB52369 - How to enable debug logging in the Orion.log.
Path forServer_systemname.log: <ePO installed folder>\db\logs
To enable debug logging forserver_systemname.log , see KB56207 - Data Collection - How to enable Log Level 8 for ePolicy Orchestrator troubleshooting.
NOTE: The log details received from the server and client are included with DEBUG logging.
Orion.log
From each log, observe the time stamp and the highlighted lines, which gives the sequence of flow from the console whenCollect the sequence follows from ePO to client is clicked.
Thetime 10.10.53 with the client AGENTGUID information from orion.log shows the posting collection for the remote log to the client system.
The SST process contains response Type 1 and Type 2.
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":1,"blockSize":1656,"totalFileSize":1656,"responseType":1,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":12,"blockSize":2097152,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Response Type = 2
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
MASVC_Systemname.log
From the server side (orion.log ), at 10.10.57 time the Received datachannel message for topic : EPOAGENTMETA_SstAck from agent
This confirms that the request is sent to the client to process the SST for log collection, and the time stamp in theMASVC log given below matches the time 10.10.57.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe data : MA_SstRemoteLog.1
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Server_Systemname.log
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 I #04476 NAIMSERV Received [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697}
20230310101057 X #04476 NAIMSERV server.cpp(894): Incoming DC message, type EPOAGENTMETA_SstRemoteLogs, origin EPOAGENT3000, correlation ID 25 from agent with GUID {7abc1648-6a0c-11ed-05ee-00505693a697}
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 X #04476 NAIMSERV server.cpp(902): Sending data channel message EPOAGENTMETA_SstRemoteLogs to ePO server for processing
20230310101057 I #04476 NAIMSERV Processed [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697} in 78ms
20230310101057 I #04476 MOD_EPO epo request processed, rc=202, session ID=855, session time=133ms
20230310101057 X #04476 MOD_EPO mod_epo.cpp(322): Current open sessions=1
20230310101101 X #10964 NAIMSERV common\AgentHandlerDAO.cpp(557): flush is called
20230310101101 X #10964 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
Step 1: What's SST and how to enable this option using the TA Policy?
You can view the TA logs of a managed system from the ePO console remotely for troubleshooting.
You can enable remote logging by enabling the Enable Remote Logging option under Policy Catalog, Trellix Agent, General, Logging.
The default line limit for the remote log is 200 and can go up to 5,000.
Under Remote Logging, select Enable remote Logging to enable this SST to work.
Step 2: How to view the log from the ePO console and steps to download the TA logs from the ePO console.
Once the policy is enabled with remote logging and the policy is enforced to the client, perform the following steps:
- Go to System Tree and select Actions, Agent, Single System Troubleshooting.
- The page shows the option Collect, which when initialized collects the logs and redirects to the Download option to download the
zip file.
- Click Download and the latest logs of TA are downloaded with the
hostname.zip file.
Issues / Errors
The SST option shows the error
The possible causes for this error message are as follows:
- The selected client system with the TA policy isn't enabled with the option Enable Remote Logging.
- The TA services are in the stop state or the system is shut down or not reachable.
- The same system is initialized with the "Update now" or "Run client task now" activities.
- The Collect option is clicked multiple times in the same time frame to refresh.
The relevant logs from ePO and the Client with log names and the detailed log content are discussed below.
The client side log name is
Path:
To enable debug logging for TA, see KB82170 - How to enable debug logging for McAfee Agent to troubleshoot Windows.
The ePO server side logs are
Path for
To enable debug logging for
Path for
To enable debug logging for
NOTE: The log details received from the server and client are included with DEBUG logging.
From each log, observe the time stamp and the highlighted lines, which gives the sequence of flow from the console when
The
The SST process contains response Type 1 and Type 2.
- Type 1 contains
minimal.zip , which represents the supporting JSON files for TA. - Type 2 contains the actual TA logs content.
The Type 2 data zip file (CERTMIGRATION1_productLogs.zip ) is collected in chunks, split from 1 to 12 blocks to enable collection from the client to ePO.
The response header help provide the status of the chunk and the status of the debug logging of theorion.log file.
For reference, blocks 1 and 12 are provided below to understand the start and end of the product log chunk information written in debug onorion.log .
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Posting collection of remote log to system with Agent GUID : 7ABC1648-6A0C-11ED-05EE-00505693A697 correlation Id : 25 Data : {"Request":{},"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","Type":"All"} sender Guid = 9a9ec681-5b41-4a07-87da-bf2d6fddf37c
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
The response header help provide the status of the chunk and the status of the debug logging of the
For reference, blocks 1 and 12 are provided below to understand the start and end of the product log chunk information written in debug on
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
From the server side (
This confirms that the request is sent to the client to process the SST for log collection, and the time stamp in the
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
The client connects to the server at the same time that it connects to the agent handler (server service - Apache process) to process the MsgUpload request. Apache sends it to the Tomcat process to get the TA logs for the server\EPOAGENTMETA_sst directory.
Affected Products
Languages:
This article is available in the following languages: