Fluxo de trabalho do recurso de solução de problemas de sistema único (SST) do Trellix Agent
Artigos técnicos ID:
KB96404
Última modificação: 12/07/2023
Última modificação: 12/07/2023
Ambiente
ePolicy Orchestrator (ePO) 10.x
Trellix Agent (TA) 5.7.x
Trellix Agent (TA) 5.7.x
Resumo
As etapas a seguir detalham o fluxo de trabalho do recurso Single System Troubleshooting (SST) do TA.
Passo 1: O que é SST e como habilitar esta opção usando a Política TA?
Você pode visualizar os logs TA de um sistema gerenciado no console do ePO remotamente para solucionar problemas.
Você pode ativar o registro remoto ativando a opção Ativar registro remoto em Catálogo de políticas, Agente Trellix, Geral, Registro.
O limite de linha padrão para o log remoto é 200 e pode ir até 5.000.
Em Remote Logging, selecione Enable remote Logging para permitir que este SST funcione.
Etapa 2: como visualizar o log do console do ePO e etapas para baixar os logs TA do console do ePO.
Assim que a política estiver habilitada com registro remoto e a política for aplicada ao cliente, execute as seguintes etapas:
Problemas / Erros
A opção SST apresenta o erroThe selected system cannot use this feature as the system is not connected to ePO semelhante ao mostrado na imagem abaixo.
As possíveis causas para esta mensagem de erro são as seguintes:
Os logs relevantes do ePO e do cliente com nomes de log e o conteúdo detalhado log são discutidos abaixo.
O nome do log do lado cliente éMASVC_systemname.log
Path:C:\programdata\mcafee\agent\logs\
Para habilitar o log de depuração para TA, consulte KB82170 - Como habilitar o log de depuração paro McAfee Agent para solucionar problemas do Windows.
Os logs do lado servidor ePO sãoorion.log e server_systemname.log
Caminho paraOrion.log : <ePO installed folder>\server\logs
Para habilitar o log de depuração paraOrion.log , consulte KB52369 - Como habilitar o log de depuração no Orion.log.
Caminho paraServer_systemname.log: <ePO installed folder>\db\logs
Para habilitar o log de depuração paraserver_systemname.log , consulte KB56207 - Coleta de dados - Como habilitar o nível de log 8 para solução de problemas do ePolicy Orchestrator.
NOTA: Os detalhes do registro recebidos do servidor e do cliente estão incluídos no registro DEBUG.
Orion.log
A partir de cada log, observe o carimbo de data/hora e as linhas destacadas, que dão a sequência do fluxo do console quandoCollect the sequence follows from ePO to client é clicado.
As informaçõestime 10.10.53 with the client AGENTGUID de orion.log mostram a coleta de postagem para o log remoto no sistema cliente.
O processo SST contém resposta Tipo 1 e Tipo 2.
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":1,"blockSize":1656,"totalFileSize":1656,"responseType":1,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":12,"blockSize":2097152,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Response Type = 2
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
MASVC_Systemname.log
Do lado servidor (orion.log ), em 10.10.57 time the Received datachannel message for topic : EPOAGENTMETA_SstAck from agent
Isso confirma que a solicitação foi enviada ao cliente para processar o SST para coleta de log e o carimbo de data / hora noMASVC log fornecido abaixo corresponde à hora 10.10.57.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe data : MA_SstRemoteLog.1
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Server_Systemname.log
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 I #04476 NAIMSERV Received [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697}
20230310101057 X #04476 NAIMSERV server.cpp(894): Incoming DC message, type EPOAGENTMETA_SstRemoteLogs, origin EPOAGENT3000, correlation ID 25 from agent with GUID {7abc1648-6a0c-11ed-05ee-00505693a697}
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 X #04476 NAIMSERV server.cpp(902): Sending data channel message EPOAGENTMETA_SstRemoteLogs to ePO server for processing
20230310101057 I #04476 NAIMSERV Processed [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697} in 78ms
20230310101057 I #04476 MOD_EPO epo request processed, rc=202, session ID=855, session time=133ms
20230310101057 X #04476 MOD_EPO mod_epo.cpp(322): Current open sessions=1
20230310101101 X #10964 NAIMSERV common\AgentHandlerDAO.cpp(557): flush is called
20230310101101 X #10964 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
Passo 1: O que é SST e como habilitar esta opção usando a Política TA?
Você pode visualizar os logs TA de um sistema gerenciado no console do ePO remotamente para solucionar problemas.
Você pode ativar o registro remoto ativando a opção Ativar registro remoto em Catálogo de políticas, Agente Trellix, Geral, Registro.
O limite de linha padrão para o log remoto é 200 e pode ir até 5.000.
Em Remote Logging, selecione Enable remote Logging para permitir que este SST funcione.
Etapa 2: como visualizar o log do console do ePO e etapas para baixar os logs TA do console do ePO.
Assim que a política estiver habilitada com registro remoto e a política for aplicada ao cliente, execute as seguintes etapas:
- Vá para a Árvore do sistema e selecione Ações, Agente, Solução de problemas de sistema único.
- A página apresenta a opção Collect, que ao ser inicializada coleta os logs e redireciona para a opção Download para baixar o arquivo
zip .
- Clique em Download e os logs mais recentes do TA são baixados com o arquivo
hostname.zip .
Problemas / Erros
A opção SST apresenta o erro
As possíveis causas para esta mensagem de erro são as seguintes:
- O sistema cliente selecionado com a política TA não é ativado com a opção Ativar log remoto.
- Os serviços TA estão parados ou o sistema está desligado ou inacessível.
- O mesmo sistema é inicializado com as atividades "Atualizar agora" ou "Executar tarefa do cliente agora".
- A opção Coletar é clicada várias vezes no mesmo período de tempo para atualizar.
Os logs relevantes do ePO e do cliente com nomes de log e o conteúdo detalhado log são discutidos abaixo.
O nome do log do lado cliente é
Path:
Para habilitar o log de depuração para TA, consulte KB82170 - Como habilitar o log de depuração paro McAfee Agent para solucionar problemas do Windows.
Os logs do lado servidor ePO são
Caminho para
Para habilitar o log de depuração para
Caminho para
Para habilitar o log de depuração para
NOTA: Os detalhes do registro recebidos do servidor e do cliente estão incluídos no registro DEBUG.
A partir de cada log, observe o carimbo de data/hora e as linhas destacadas, que dão a sequência do fluxo do console quando
As informações
O processo SST contém resposta Tipo 1 e Tipo 2.
- O tipo 1 contém
minimal.zip , que representa os arquivos JSON de suporte para TA. - O tipo 2 contém o conteúdo real dos logs TA.
O arquivo zip de dados Tipo 2 (CERTMIGRATION1_productLogs.zip ) é coletado em blocos, divididos de 1 a 12 blocos para permitir a coleta do cliente para o ePO.
O cabeçalho de resposta ajuda a fornecer o status do bloco e o status do log de depuração do arquivoorion.log .
Para referência, os blocos 1 e 12 são fornecidos abaixo para entender o início e o fim das informações do bloco de log do produto gravadas em depuração emorion.log .
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Posting collection of remote log to system with Agent GUID : 7ABC1648-6A0C-11ED-05EE-00505693A697 correlation Id : 25 Data : {"Request":{},"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","Type":"All"} sender Guid = 9a9ec681-5b41-4a07-87da-bf2d6fddf37c
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
O cabeçalho de resposta ajuda a fornecer o status do bloco e o status do log de depuração do arquivo
Para referência, os blocos 1 e 12 são fornecidos abaixo para entender o início e o fim das informações do bloco de log do produto gravadas em depuração em
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
Do lado servidor (
Isso confirma que a solicitação foi enviada ao cliente para processar o SST para coleta de log e o carimbo de data / hora no
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
O cliente se conecta ao servidor ao mesmo tempo em que se conecta ao manipulador do agente (serviço do servidor - processo Apache) para processar a solicitação MsgUpload . O Apache o envia para o processo Tomcat para obter os logs TA para o diretório server\EPOAGENTMETA_sst .
Aviso de isenção de responsabilidade
O conteúdo original deste artigo foi redigido em inglês. Se houver diferenças entre o conteúdo em inglês e sua tradução, o conteúdo em inglês será o mais exato. Parte deste conteúdo foi criado por meio de tradução automática da Microsoft.
Produtos afetados
Idiomas:
Este artigo está disponível nos seguintes idiomas:
