Flujo de trabajo de la función de solución de problemas de un solo sistema (SST) de Trellix Agent
Artículos técnicos ID:
KB96404
Última modificación: 2023-07-12 16:37:53 Etc/GMT
Última modificación: 2023-07-12 16:37:53 Etc/GMT
Entorno
ePolicy Orchestrator (ePO) 10.x
Agente de Trellix (TA) 5.7.x
Agente de Trellix (TA) 5.7.x
Resumen
Los siguientes pasos detallan el flujo de trabajo de la función de solución de problemas del sistema único (SST) de TA.
Paso 1: ¿Qué es SST y cómo habilitar esta opción usando la política de TA?
Puede ver los registros de asistencia técnica de un sistema gestionado desde la consola de ePO de forma remota para solucionar problemas.
Puede habilitar el registro remoto habilitando la opción Habilitar registro remoto en Catálogo de políticas, Agente Trellix, General, Registro.
El límite de línea predeterminado para el registro remoto es 200 y puede llegar hasta 5000.
En Registro remoto, seleccione Habilitar registro remoto para permitir que este SST funcione.
Paso 2: Cómo ver el registro desde la consola de ePO y pasos para descargar los registros de TA desde la consola de ePO.
Una vez que la política esté habilitada con el registro remoto y la política se aplique al cliente, realice los siguientes pasos:
Problemas/Errores
La opción SST muestra el errorThe selected system cannot use this feature as the system is not connected to ePO similar al que se muestra en la imagen a continuación.
Las posibles causas de este mensaje de error son las siguientes:
Los registros relevantes de ePO y el Cliente con nombres de registro y el contenido detallado del registro se analizan a continuación.
El nombre del registro del lado del cliente esMASVC_systemname.log
Ruta:C:\programdata\mcafee\agent\logs\
Para habilitar el registro de depuración para TA, consulte KB82170: Cómo habilitar el registro de depuración para McAfee Agent para solucionar problemas de Windows.
Los registros del lado del servidor de ePO sonorion.log y server_systemname.log
Ruta paraOrion.log : <ePO installed folder>\server\logs
Para habilitar el registro de depuración paraOrion.log , consulte KB52369: Cómo habilitar el registro de depuración en Orion.log.
Ruta paraServer_systemname.log: <ePO installed folder>\db\logs
Para habilitar el registro de depuración paraserver_systemname.log , consulte KB56207: Recopilación de datos: cómo habilitar el nivel de registro 8 para la solución de problemas de ePolicy Orchestrator.
NOTA: Los detalles del registro recibidos del servidor y el cliente se incluyen con el registro DEBUG.
Orion.log
De cada registro, observe la marca de tiempo y las líneas resaltadas, que dan la secuencia de flujo desde la consola cuando se hace clic enCollect the sequence follows from ePO to client .
La informacióntime 10.10.53 with the client AGENTGUID de orion.log muestra la recopilación de publicaciones para el registro remoto en el sistema cliente.
El proceso SST contiene la respuesta Tipo 1 y Tipo 2.
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":1,"blockSize":1656,"totalFileSize":1656,"responseType":1,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":12,"blockSize":2097152,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Response Type = 2
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
MASVC_Systemname.log
Del lado del servidor (orion.log ), en 10.10.57 time the Received datachannel message for topic : EPOAGENTMETA_SstAck from agent
Esto confirma que la solicitud se envía al cliente para procesar el SST para la recopilación de registros, y la marca de tiempo enMASVC log que se proporciona a continuación coincide con la hora 10.10.57.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe data : MA_SstRemoteLog.1
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Server_Systemname.log
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 I #04476 NAIMSERV Received [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697}
20230310101057 X #04476 NAIMSERV server.cpp(894): Incoming DC message, type EPOAGENTMETA_SstRemoteLogs, origin EPOAGENT3000, correlation ID 25 from agent with GUID {7abc1648-6a0c-11ed-05ee-00505693a697}
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 X #04476 NAIMSERV server.cpp(902): Sending data channel message EPOAGENTMETA_SstRemoteLogs to ePO server for processing
20230310101057 I #04476 NAIMSERV Processed [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697} in 78ms
20230310101057 I #04476 MOD_EPO epo request processed, rc=202, session ID=855, session time=133ms
20230310101057 X #04476 MOD_EPO mod_epo.cpp(322): Current open sessions=1
20230310101101 X #10964 NAIMSERV common\AgentHandlerDAO.cpp(557): flush is called
20230310101101 X #10964 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
Paso 1: ¿Qué es SST y cómo habilitar esta opción usando la política de TA?
Puede ver los registros de asistencia técnica de un sistema gestionado desde la consola de ePO de forma remota para solucionar problemas.
Puede habilitar el registro remoto habilitando la opción Habilitar registro remoto en Catálogo de políticas, Agente Trellix, General, Registro.
El límite de línea predeterminado para el registro remoto es 200 y puede llegar hasta 5000.
En Registro remoto, seleccione Habilitar registro remoto para permitir que este SST funcione.
Paso 2: Cómo ver el registro desde la consola de ePO y pasos para descargar los registros de TA desde la consola de ePO.
Una vez que la política esté habilitada con el registro remoto y la política se aplique al cliente, realice los siguientes pasos:
- Vaya al Árbol de sistemas y seleccione Acciones, Agente, Solución de problemas de un solo sistema.
- La página muestra la opción Recopilar, que cuando se inicializa recopila los registros y redirige a la opción Descargar para descargar el archivo
zip .
- Haga clic en Descargar y los últimos registros de TA se descargan con el archivo
hostname.zip .
Problemas/Errores
La opción SST muestra el error
Las posibles causas de este mensaje de error son las siguientes:
- El sistema cliente seleccionado con la política de TA no está habilitado con la opción Habilitar registro remoto.
- Los servicios de TA están detenidos o el sistema está cerrado o no se puede acceder a ellos.
- El mismo sistema se inicializa con las actividades "Actualizar ahora" o "Ejecutar tarea de cliente ahora".
- Se hace clic en la opción Recopilar varias veces en el mismo período de tiempo para actualizar.
Los registros relevantes de ePO y el Cliente con nombres de registro y el contenido detallado del registro se analizan a continuación.
El nombre del registro del lado del cliente es
Ruta:
Para habilitar el registro de depuración para TA, consulte KB82170: Cómo habilitar el registro de depuración para McAfee Agent para solucionar problemas de Windows.
Los registros del lado del servidor de ePO son
Ruta para
Para habilitar el registro de depuración para
Ruta para
Para habilitar el registro de depuración para
NOTA: Los detalles del registro recibidos del servidor y el cliente se incluyen con el registro DEBUG.
De cada registro, observe la marca de tiempo y las líneas resaltadas, que dan la secuencia de flujo desde la consola cuando se hace clic en
La información
El proceso SST contiene la respuesta Tipo 1 y Tipo 2.
- El tipo 1 contiene
minimal.zip , que representa los archivos JSON compatibles con TA. - El tipo 2 contiene el contenido real de los registros de TA.
El archivo zip de datos de tipo 2 (CERTMIGRATION1_productLogs.zip ) se recopila en fragmentos, divididos de 1 a 12 bloques para permitir la recopilación del cliente a ePO.
El encabezado de respuesta ayuda a proporcionar el estado del fragmento y el estado del registro de depuración del archivoorion.log .
Como referencia, los bloques 1 y 12 se proporcionan a continuación para comprender el inicio y el final de la información del fragmento de registro del producto escrita en depuración enorion.log .
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Posting collection of remote log to system with Agent GUID : 7ABC1648-6A0C-11ED-05EE-00505693A697 correlation Id : 25 Data : {"Request":{},"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","Type":"All"} sender Guid = 9a9ec681-5b41-4a07-87da-bf2d6fddf37c
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
El encabezado de respuesta ayuda a proporcionar el estado del fragmento y el estado del registro de depuración del archivo
Como referencia, los bloques 1 y 12 se proporcionan a continuación para comprender el inicio y el final de la información del fragmento de registro del producto escrita en depuración en
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
Del lado del servidor (
Esto confirma que la solicitud se envía al cliente para procesar el SST para la recopilación de registros, y la marca de tiempo en
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
El cliente se conecta al servidor al mismo tiempo que se conecta al controlador de agentes (servicio del servidor - proceso de Apache) para procesar la solicitud MsgUpload . Apache lo envía al proceso de Tomcat para obtener los registros de TA para el directorio server\EPOAGENTMETA_sst .
Descargo de responsabilidad
El contenido de este artículo se creó en inglés. En caso de darse cualquier diferencia entre el contenido en inglés y su traducción, el primero siempre será el más preciso. La traducción de algunas partes de este contenido la ha proporcionado Microsoft mediante el uso de traducción automática.
Productos implicados
Idiomas:
Este artículo se encuentra disponible en los siguientes idiomas:
