How to turn on agent and core logging

  • 7017197
  • 27-Jan-2016
  • 27-Jan-2016

Environment

NetIQ Secure Configuration Manager

Situation

Sometimes it is necessary to turn up logging for the Windows agent and Core Services in order to capture more information in the logs

Resolution

To enable logging for Core Services logon to the machine where core services is installed and perform the steps below. 
1. Go to start\programs\NetIQ Secure Configuration Manager\Core Services Configuration Utility. 
2. In the Window that appears select the Logging tab. 
3. Change the Log Output Level to debug. 
4. Change the Communication Tracing to enabled. 
5. Then select Apply and OK. 
6. Go to Services and stop the NetIQ Core Services service and leave the services window open. 
7. Go to Windows Explorer to this directory -\%Program files%\NetIQ\Secure Configuration Manager\Core Services\Log  and delete or rename the log files here.  If it is a 64 bit machine it will be \%Program files (x86)%\NetIQ\Secure Configuration Manager\Core Services\Log
8. Return to the Services window and start the NetIQ Core Services service. 
9. Recreate the issue so that it is captured in the log files.  
10. Collect the logs at this location before any other settings are changed.  \%Program files%\NetIQ\Secure Configuration Manager\Core Services\Log or  \%Program files (x86)%\NetIQ\Secure Configuration Manager\Core Services\Log if it is a 64 bit machine
11. Go to start\programs\NetIQ Secure Configuration Manager\Core Services Configuration Utility 
12. Select the Logging tab and change the Log Output level to Information. 
13. Change the Communication Tracing to disabled. 
14. Open the Services window and stop and restart the NetIQ Core Services service.  
15. Email the logs to support@netiq.com making sure to include the Service Request Number in the title. 
 
Go to the machine where the Windows Agent is physically installed to perform the actions below. 
1. On the agent machine go to Services and stop the NetIQ Security Agent for Windows. 
2. Then go to Windows Explorer and locate \%Program Files%\NetIQ\Secure Configuration Manager\Security Agent for Windows\log and delete or rename all of the files in this directory. 
3. Open the registry by going to start\run and typing regedit. 
4. In the registry editor go to HKEY_LOCAL_MACHINE\Software\Netiq\VigilEnt . If 64 bit machine, go to HKEY_LOCAL_MACHINE\Software\Wow6432Node\Netiq\VigilEnt
5. Change the logLevel value from 2 to 4. 
6. Close the registry and open the Services window and start the NetIQ Security Agent for Windows service. 
7. Recreate the issue and then collect the entire log folder from this directory.   \%Program Files%\NetIQ\Secure Configuration Manager\Security Agent for Windows\log
8. Send the logs to support@netiq.com and make sure to add the Service Request number in the title of the email.  
9. Open the registry editor and go to HKEY_LOCAL_MACHINE\Software\Netiq\VigilEnt . If 64  bit machine, go to HKEY_LOCAL_MACHINE\Software\Wow6432Node\Netiq\VigilEnt
10. Return the logLevel value from 4 to 2. 
11. Open services and stop and restart the NetIQ Security Agent for Windows service.  

Cause

An error occurs and more logging is required