Flux de travail de la fonctionnalité de dépannage de système unique (SST) de l'agent Trellix
Articles techniques ID:
KB96404
Date de la dernière modification : 2023-07-12 16:38:12 Etc/GMT
Date de la dernière modification : 2023-07-12 16:38:12 Etc/GMT
Environnement
ePolicy Orchestrator (ePO) 10.x
Trellix Agent (TA) 5.7.x
Trellix Agent (TA) 5.7.x
Synthèse
Les étapes suivantes détaillent le flux de travail de la fonction de dépannage de système unique (SST) de TA.
Étape 1 : Qu'est-ce que SST et comment activer cette option à l'aide de la politique TA ?
Vous pouvez afficher à distance les journaux TA d'un système géré à partir de la console ePO à des fins de dépannage.
Vous pouvez activer la journalisation à distance en activant l'option Activer la journalisation à distance sous Policy Catalog, Trellix Agent, General, Logging.
La limite de lignes par défaut pour le journal distant est de 200 et peut aller jusqu'à 5 000.
Propriétés Journalisation à distance, sélectionnez Activer la journalisation à distance pour permettre à ce SST de fonctionner.
Étape 2 : Comment afficher le journal à partir de la console ePO et étapes pour télécharger les journaux TA à partir de la console ePO.
Une fois que la politique est activée avec la journalisation à distance et que la politique est appliquée au client, effectuez les étapes suivantes :
Problèmes / Erreurs
L'option SST affiche l'erreurThe selected system cannot use this feature as the system is not connected to ePO similaire à celle illustrée dans l'image ci-dessous.
Les causes possibles de ce message d'erreur sont les suivantes :
Les journaux pertinents d'ePO et du client avec les noms des journaux et le contenu détaillé des journaux sont décrits ci-dessous.
Le nom du journal côté client estMASVC_systemname.log
Path :C:\programdata\mcafee\agent\logs\
Pour activer la journalisation de débogage pour TA, voir KB82170 - Comment activer la journalisation de débogage pour McAfee Agent afin de dépanner Windows.
Les journaux côté serveur ePO sontorion.log et server_systemname.log
Chemin pourOrion.log : <ePO installed folder>\server\logs
Pour activer la journalisation de débogage pourOrion.log , voir KB52369 - Comment activer la journalisation de débogage dans Orion.log.
Chemin pourServer_systemname.log: <ePO installed folder>\db\logs
Pour activer la journalisation de débogage pourserver_systemname.log , voir KB56207 - Collecte de données - Comment activer le niveau de journalisation 8 pour le dépannage d'ePolicy Orchestrator.
REMARQUE : Les détails du journal reçus du serveur et du client sont inclus dans la journalisation DEBUG.
Orion.log
À partir de chaque journal, observez l'horodatage et les lignes en surbrillance, qui donnent la séquence de flux depuis la console lorsqueCollect the sequence follows from ePO to client est cliqué.
Les informationstime 10.10.53 with the client AGENTGUID de orion.log montrent la collection de publication pour le journal distant sur le système client.
Le processus SST contient les types de réponse 1 et 2.
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":1,"blockSize":1656,"totalFileSize":1656,"responseType":1,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":12,"blockSize":2097152,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Response Type = 2
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
MASVC_Systemname.log
Du côté serveur (orion.log ), à 10.10.57 time the Received datachannel message for topic : EPOAGENTMETA_SstAck from agent
Cela confirme que la demande est envoyée au client pour traiter le SST pour la collecte de journaux, et l'horodatage dans leMASVC log ci-dessous correspond à l'heure 10.10.57.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe data : MA_SstRemoteLog.1
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Server_Systemname.log
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 I #04476 NAIMSERV Received [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697}
20230310101057 X #04476 NAIMSERV server.cpp(894): Incoming DC message, type EPOAGENTMETA_SstRemoteLogs, origin EPOAGENT3000, correlation ID 25 from agent with GUID {7abc1648-6a0c-11ed-05ee-00505693a697}
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 X #04476 NAIMSERV server.cpp(902): Sending data channel message EPOAGENTMETA_SstRemoteLogs to ePO server for processing
20230310101057 I #04476 NAIMSERV Processed [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697} in 78ms
20230310101057 I #04476 MOD_EPO epo request processed, rc=202, session ID=855, session time=133ms
20230310101057 X #04476 MOD_EPO mod_epo.cpp(322): Current open sessions=1
20230310101101 X #10964 NAIMSERV common\AgentHandlerDAO.cpp(557): flush is called
20230310101101 X #10964 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
Étape 1 : Qu'est-ce que SST et comment activer cette option à l'aide de la politique TA ?
Vous pouvez afficher à distance les journaux TA d'un système géré à partir de la console ePO à des fins de dépannage.
Vous pouvez activer la journalisation à distance en activant l'option Activer la journalisation à distance sous Policy Catalog, Trellix Agent, General, Logging.
La limite de lignes par défaut pour le journal distant est de 200 et peut aller jusqu'à 5 000.
Propriétés Journalisation à distance, sélectionnez Activer la journalisation à distance pour permettre à ce SST de fonctionner.
Étape 2 : Comment afficher le journal à partir de la console ePO et étapes pour télécharger les journaux TA à partir de la console ePO.
Une fois que la politique est activée avec la journalisation à distance et que la politique est appliquée au client, effectuez les étapes suivantes :
- Accédez à l'arborescence des systèmes et sélectionnez Actions, Agent, Dépannage d'un seul système.
- La page affiche l'option Collect, qui, une fois initialisée, collecte les journaux et redirige vers l'option Download pour télécharger le fichier
zip .
- Cliquez sur Télécharger et les derniers journaux de TA sont téléchargés avec le fichier
hostname.zip .
Problèmes / Erreurs
L'option SST affiche l'erreur
Les causes possibles de ce message d'erreur sont les suivantes :
- Le système client sélectionné avec la stratégie TA n'est pas activé avec l'option Activer la journalisation à distance.
- Les services TA sont à l'état d'arrêt ou le système est arrêté ou inaccessible.
- Le même système est initialisé avec les activités "Mettre à jour maintenant" ou "Exécuter la tâche client maintenant".
- L'option Collecter est cliquée plusieurs fois dans le même laps de temps pour rafraîchir.
Les journaux pertinents d'ePO et du client avec les noms des journaux et le contenu détaillé des journaux sont décrits ci-dessous.
Le nom du journal côté client est
Path :
Pour activer la journalisation de débogage pour TA, voir KB82170 - Comment activer la journalisation de débogage pour McAfee Agent afin de dépanner Windows.
Les journaux côté serveur ePO sont
Chemin pour
Pour activer la journalisation de débogage pour
Chemin pour
Pour activer la journalisation de débogage pour
REMARQUE : Les détails du journal reçus du serveur et du client sont inclus dans la journalisation DEBUG.
À partir de chaque journal, observez l'horodatage et les lignes en surbrillance, qui donnent la séquence de flux depuis la console lorsque
Les informations
Le processus SST contient les types de réponse 1 et 2.
- Le type 1 contient
minimal.zip , qui représente les fichiers JSON pris en charge pour TA. - Le type 2 contient le contenu réel des journaux TA.
Le fichier zip de données de type 2 (CERTMIGRATION1_productLogs.zip ) est collecté en blocs, divisés de 1 à 12 blocs pour permettre la collecte du client vers ePO.
L'en-tête de réponse aide à fournir l'état du bloc et l'état de la journalisation de débogage du fichierorion.log .
Pour référence, les blocs 1 et 12 sont fournis ci-dessous pour comprendre le début et la fin des informations de bloc de journal du produit écrites dans le débogage surorion.log .
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Posting collection of remote log to system with Agent GUID : 7ABC1648-6A0C-11ED-05EE-00505693A697 correlation Id : 25 Data : {"Request":{},"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","Type":"All"} sender Guid = 9a9ec681-5b41-4a07-87da-bf2d6fddf37c
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
L'en-tête de réponse aide à fournir l'état du bloc et l'état de la journalisation de débogage du fichier
Pour référence, les blocs 1 et 12 sont fournis ci-dessous pour comprendre le début et la fin des informations de bloc de journal du produit écrites dans le débogage sur
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
Du côté serveur (
Cela confirme que la demande est envoyée au client pour traiter le SST pour la collecte de journaux, et l'horodatage dans le
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Le client se connecte au serveur en même temps qu'il se connecte au gestionnaire d'agent (service serveur - processus Apache) pour traiter la requête MsgUpload . Apache l'envoie au processus Tomcat pour obtenir les journaux TA pour le répertoire server\EPOAGENTMETA_sst .
Clause d'exclusion de responsabilité
Le contenu du présent article a été rédigé en anglais. En cas de divergences entre la version anglaise et sa traduction, la version en anglais prévaut. Certaines parties de ce contenu ont été traduites par le moteur de traduction automatique de Microsoft.
Produits affectés
Langues :
Cet article est disponible dans les langues suivantes :
