Trellix Agent の単一システムトラブルシューティング (SST) 機能のワークフロー
技術的な記事 ID:
KB96404
最終更新: 2023-04-03 13:05:25 Etc/GMT
最終更新: 2023-04-03 13:05:25 Etc/GMT
環境
ePolicy Orchestrator (ePO) 10.x
Trellix Agent (TA) 5.7.x
Trellix Agent (TA) 5.7.x
概要
次の手順では、TA の単一システムのトラブルシューティング (SST) 機能のワークフローについて説明します。
手順 1: SST とは何か、 TA ポリシーを使ってこのオプションを有効にする方法は？
トラブルシューティングのために、管理対象システムの TA ログを ePO コンソールからリモートから表示できます。
リモートロギングを有効にするには、ポリシーカタログ、Trellix Agent、全般、ロギングのリモートロギングを有効にするオプションを有効にします。
リモートログのデフォルトの回線制限は200で、最大5000になります。
リモートロギングで、リモートロギングを有効にするを選択して、この SST が機能するようにします。
手順 2: ePO コンソールからログを表示する方法と、TA ログを ePO コンソールからダウンロードする手順を説明します。
リモートロギングでポリシーを有効にし、ポリシーがクライアントに施行されたら、次の手順を実行します:
問題/エラー
SST オプションを選択すると、以下の図のようなエラーThe selected system cannot use this feature as the system is not connected to ePO が表示されます。
このエラーメッセージには、次のような原因が考えられます。
ePO からの関連ログと、ログ名と詳細ログコンテンツのクライアントが以下で説明されています。
クライアント側のログ名はMASVC_systemname.log
です パス:C:\programdata\mcafee\agent\logs\
TA のデバッグロギングを有効にする方法については、 KB82170-Windows のトラブルシューティングのために McAfee Agent のデバッグログを有効にする方法 を参照してください。
ePO サーバー側のログはorion.log と server_systemname.log
です。Orion.log のパス: <ePO installed folder>\server\logs
Orion.log のデバッグロギングを有効にするには、 KB52369 - Orion.log でデバッグロギングを有効にする方法を参照してください。
Server_systemname.log: <ePO installed folder>\db\logs
のパスserver_systemname.log のデバッグロギングを有効にするには、データ収集 - ePolicy Orchestrator のトラブルシューティングでログレベル8を有効にする方法を参照してください。
注: サーバーとクライアントから受信したログの詳細は、デバッグロギングに含まれています。
Orion.log
各ログで、タイムスタンプと強調表示行を確認します。これにより、Collect the sequence follows from ePO to client がクリックされたときにコンソールからの一連のフローが示されます。
orion.log の time 10.10.53 with the client AGENTGUID 情報は、リモートログのポストコレクションをクライアントシステムに表示します。
SST プロセスには、応答タイプ1とタイプ2が含まれます。
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":1,"blockSize":1656,"totalFileSize":1656,"responseType":1,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":1,"totalBlocks":12,"blockSize":2097152,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Response Type = 2
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
MASVC_Systemname.log
10.10.57 time the Received datachannel message for topic : EPOAGENTMETA_SstAck from agent
のサーバー側 (orion.log )から
これにより、ログ収集のためにSSTを処理するためのリクエストがクライアントに送信され、以下に示す MASVC log 内のタイムスタンプが時刻と一致することが確認されました。10.10.57.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe data : MA_SstRemoteLog.1
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
Server_Systemname.log
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 I #04476 NAIMSERV Received [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697}
20230310101057 X #04476 NAIMSERV server.cpp(894): Incoming DC message, type EPOAGENTMETA_SstRemoteLogs, origin EPOAGENT3000, correlation ID 25 from agent with GUID {7abc1648-6a0c-11ed-05ee-00505693a697}
20230310101057 X #04476 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
20230310101057 X #04476 NAIMSERV server.cpp(902): Sending data channel message EPOAGENTMETA_SstRemoteLogs to ePO server for processing
20230310101057 I #04476 NAIMSERV Processed [MsgUpload] from CERTMIGRATION1:{7ABC1648-6A0C-11ED-05EE-00505693A697} in 78ms
20230310101057 I #04476 MOD_EPO epo request processed, rc=202, session ID=855, session time=133ms
20230310101057 X #04476 MOD_EPO mod_epo.cpp(322): Current open sessions=1
20230310101101 X #10964 NAIMSERV common\AgentHandlerDAO.cpp(557): flush is called
20230310101101 X #10964 EPODAL ePOData_Connection.cpp(585): ssl Authenticate mode is 1
手順 1: SST とは何か、 TA ポリシーを使ってこのオプションを有効にする方法は？
トラブルシューティングのために、管理対象システムの TA ログを ePO コンソールからリモートから表示できます。
リモートロギングを有効にするには、ポリシーカタログ、Trellix Agent、全般、ロギングのリモートロギングを有効にするオプションを有効にします。
リモートログのデフォルトの回線制限は200で、最大5000になります。
リモートロギングで、リモートロギングを有効にするを選択して、この SST が機能するようにします。
手順 2: ePO コンソールからログを表示する方法と、TA ログを ePO コンソールからダウンロードする手順を説明します。
リモートロギングでポリシーを有効にし、ポリシーがクライアントに施行されたら、次の手順を実行します:
- システムツリーに移動して、アクション、Agent、 単一システムのトラブルシューティングを選択します。
- ページには Collectオプションが表示されます。これは、初期化時にログを収集して ダウンロード オプションにリダイレクトし、
zip ファイルをダウンロードします。
- ダウンロードをクリックすると、TA の最新のログが
hostname.zip ファイルとともにダウンロードされます。
問題/エラー
SST オプションを選択すると、以下の図のようなエラー
このエラーメッセージには、次のような原因が考えられます。
- TA ポリシーを使用して選択したクライアントシステムは、 リモートロギングを有効にするオプションで有効になっていません。
- TA サービスが停止状態になっているか、システムがシャットダウンまたは接続不能になっています。
- 同じシステムを「今すぐ更新」または「今すぐクライアントタスクを実行」アクティビティで初期化する。
- 収集オプションが同じ時間枠で複数回クリックされ、更新します。
ePO からの関連ログと、ログ名と詳細ログコンテンツのクライアントが以下で説明されています。
クライアント側のログ名は
です パス:
TA のデバッグロギングを有効にする方法については、 KB82170-Windows のトラブルシューティングのために McAfee Agent のデバッグログを有効にする方法 を参照してください。
ePO サーバー側のログは
です。
のパス
注: サーバーとクライアントから受信したログの詳細は、デバッグロギングに含まれています。
各ログで、タイムスタンプと強調表示行を確認します。これにより、
SST プロセスには、応答タイプ1とタイプ2が含まれます。
- タイプ1 には
minimal.zip が含まれており、 TA のサポート JSON ファイルを表しています。 - タイプ 2 には、実際の TA ログコンテンツが含まれています。
タイプ2の データ zip ファイル (CERTMIGRATION1_productLogs.zip ) はチャンクで収集され、1から12のブロックに分割して、クライアントから ePO への収集を有効にします。
応答ヘッダーは、チャンクのステータスとorion.log ファイルのデバッグロギングのステータスを提供します。
参考までに、orion.log 上のデバッグで書かれた製品ログのチャンク情報の開始と終了を理解するために、ブロック1と12を以下に示します。
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Posting collection of remote log to system with Agent GUID : 7ABC1648-6A0C-11ED-05EE-00505693A697 correlation Id : 25 Data : {"Request":{},"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","Type":"All"} sender Guid = 9a9ec681-5b41-4a07-87da-bf2d6fddf37c
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
応答ヘッダーは、チャンクのステータスと
参考までに、
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Updating session state to SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Setting the product percent finished : 0
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Time out value is : 600000
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:53,879 DEBUG [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:53,879 INFO [https-jsse-nio-8443-exec-721] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Status of this session = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_INITIATED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_INITIATED","RemoteLogProducts":"SST_STATE_REQUEST_INITIATED"},"SstProgressPercent":0}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] listeners.sstDCNotificationAcknowledge - Received datachannel message for topic : EPOAGENTMETA_SstAck from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - client has acknowledged the Remote log request
2023-03-10T10:10:57,310 DEBUG [pool-1-thread-30] model.SstSession - Changing the session state to SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,310 INFO [pool-1-thread-30] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_INITIATED
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Response Type = 1
2023-03-10T10:10:57,549 INFO [pool-1-thread-31] model.SstSession - Iterating session requests
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Time out value is : 600000
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - The request origin time is : 2023-03-10T10:10:53.781+05:30
2023-03-10T10:10:57,549 DEBUG [pool-1-thread-31] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_REQUEST_ACKNOWLEDGED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:10:57,550 INFO [pool-1-thread-31] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:10:57,563 INFO [pool-1-thread-31] model.SstSessionRequest - Adding block 1 of 1 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_minimal.zip
2023-03-10T10:10:57,567 INFO [pool-1-thread-31] model.SstSessionRequest - Received Blocks : 1totalBlocks1
2023-03-10T10:10:57,567 DEBUG [pool-1-thread-31] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Response Type = 2
2023-03-10T10:11:05,830 INFO [pool-1-thread-32] model.SstSession - Iterating session requests
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - Setting the product percent finished : 0
2023-03-10T10:11:05,830 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:53.780+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Time out value is : 600000
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:05,831 DEBUG [pool-1-thread-32] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":0}
2023-03-10T10:11:05,831 INFO [pool-1-thread-32] model.SstSessionRequest - Creating fileC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:05,845 INFO [pool-1-thread-32] model.SstSessionRequest - Adding block 1 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:05,865 INFO [pool-1-thread-32] model.SstSessionRequest - Received Blocks : 1totalBlocks12
2023-03-10T10:11:05,865 DEBUG [pool-1-thread-32] model.SstSessionRequest - The percentage received is : 8
2023-03-10T10:11:07,910 INFO [pool-1-thread-33] listeners.SstRemoteLogListener - Received datachannel message for topic : EPOAGENTMETA_SstRemoteLogs from agent {7ABC1648-6A0C-11ED-05EE-00505693A697}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSessionResponse - Response Header {"version":1,"cid":25,"blockId":12,"totalBlocks":12,"blockSize":983799,"totalFileSize":24052471,"responseType":2,"reserved":0,"uuid":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10"}
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] service.SSTController - Session ID : 2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,724 INFO [pool-1-thread-43] model.SstSession - Iterating session requests
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_REQUEST_ACKNOWLEDGED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Setting the product percent finished : 91
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:11:12.618+05:30
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Request type SST_RequestTypeRemoteMinimalLogs State : SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - Time out value is : 600000
2023-03-10T10:11:12,724 DEBUG [pool-1-thread-43] model.SstSession - The request origin time is : 2023-03-10T10:10:57.567+05:30
2023-03-10T10:11:12,725 DEBUG [pool-1-thread-43] model.SstSession - Response to be posted : {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSession - Status of this session during handling of every block = {"UUID":"2e995fdb-2523-43a7-9e05-9ac76dfe6e10","SessionState":"SST_STATE_REQUEST_ACKNOWLEDGED","Status":{"RemoteLogMonitor":"SST_STATE_RESPONSE_RECEIVED","RemoteLogProducts":"SST_STATE_REQUEST_ACKNOWLEDGED"},"SstProgressPercent":91}
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstRemoteLogRequest - Preparing to store response into disk atC:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10
2023-03-10T10:11:12,725 INFO [pool-1-thread-43] model.SstSessionRequest - Adding block 12 of 12 to file C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\EPOAGENTMETA_sst\CERTMIGRATION1_2e995fdb-2523-43a7-9e05-9ac76dfe6e10\CERTMIGRATION1_productLogs.zip
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - Received Blocks : 12totalBlocks12
2023-03-10T10:11:12,736 DEBUG [pool-1-thread-43] model.SstSessionRequest - The percentage received is : 100
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSessionRequest - received all blocks for this request
2023-03-10T10:11:12,736 INFO [pool-1-thread-43] model.SstSession - Updating session state to SST_STATE_RESPONSE_RECEIVED
2023-03-10T10:11:13,772 INFO [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Iterating session requests
2023-03-10T10:11:13,772 DEBUG [https-jsse-nio-8443-exec-703] model.SstSession 1 A89464B1D69F50DA56C2BFD1E3AC5F50.route1 - Request type SST_RequestTypeRemoteProductLogs State : SST_STATE_RESPONSE_RECEIVED
のサーバー側 (
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Unpacking spipe infos fields.
2023-03-10 10:10:57.057 masvc(14600.5848) spipe.Debug: Spipe info : MA_SstRemoteLog.COUNT = 1
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : PackageType = MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) spipe.Debug: Spipe info : Types = MA_SstRemoteLog
2023-03-10 10:10:57.058 masvc(14600.5848) cryptoservice.Debug: Received unknown spipe package type
2023-03-10 10:10:57.058 masvc(14600.5848) ahclient.Debug: Received unknown spipe package type.
2023-03-10 10:10:57.058 masvc(14600.5848) property.Debug: Spipe handler with package type MsgResponse
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: MsgRequest SPIPE alert successfully completed
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: { MsgResponse }
2023-03-10 10:10:57.058 masvc(14600.5848) DataChannel.Manager.Debug: DataChannel service is handling { MsgResponse } package
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: DC ItemID: {MA_SstRemoteLog.1}, BlobSize = {156.EN_US}
2023-03-10 10:10:57.058 masvc(14600.5848) datachannel_utils.Debug: Data Blob body size : 73
2023-03-10 10:10:57.059 masvc(14600.5848) DataChannel.Database.Debug: Resetting ttl to max TTL since TTL <0> > MAX TTL<604800>
2023-03-10 10:10:57.209 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json>, len <24941>
2023-03-10 10:10:57.209 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.*>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Received topic <ma.logger.msg.pub.topic>, matched <ma.logger.msg.pub.topic>
2023-03-10 10:10:57.210 masvc(14600.5848) msgbus.Debug: Subscriber now invoking handler...
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Dumping data for monitor log request to <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>, len <1743>
2023-03-10 10:10:57.211 masvc(14600.11224) RemoteLogManager.Debug: Final list of files to zip <C:\ProgramData\McAfee\Agent\\data\sst\remotelog\agentmonitor.json;C:\ProgramData\McAfee\Agent\\data\sst\remotelog\metadata.json>
2023-03-10 10:10:57.216 masvc(14600.11224) RemoteLogManager.Debug: Zip successful, going to upload the monitor log zip
2023-03-10 10:10:57.217 masvc(14600.11224) RemoteLogManager.Debug: C:\ProgramData\McAfee\Agent\data\sst\remotelog\Remotelog_25 size <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) RemoteLogManager.Debug: Bytestream size written : <1656>
2023-03-10 10:10:57.218 masvc(14600.11224) msgbus.Debug: Endpoint <epo.service.datachannel> creation successful, reachability: <0>, timeout: <5000>, priority: <0>, thread model: <0>
2023-03-10 10:10:57.219 masvc(14600.11224) RemoteLogManager.Info: Successfully sent the DC meesage for block <1> with corrrelation ID <25>
2023-03-10 10:10:57.221 masvc(14600.11224) RemoteLogManager.Debug: Successfully uploaded agent monitor logs
クライアントは、エージェントハンドラー (サーバーサービス Apache プロセス) に接続してMsgUpload 要求を処理するときに、サーバーに接続します。Apache は、server\EPOAGENTMETA_sst ディレクトリのTA ログを取得するために Tomcat プロセスに送信します。
免責事項
この記事の内容のオリジナルは英語です。英語の内容と翻訳に相違がある場合、常に英語の内容が正確です。一部の内容は Microsoft の機械翻訳による訳文となっています。
