Resolution
goal
Will individual rule debug information still be logged if debug for the entire rule group debug is turned off?
goal
Can I get detailed status information on a rule if I have a low debug level for rule group?
fact
VigilEnt Security Agent for Unix 5.0
fact
Unix Manager 5.0
fix
Yes. Individual rules will continue to log debug information in the
note
Will individual rule debug information still be logged if debug for the entire rule group debug is turned off?
goal
Can I get detailed status information on a rule if I have a low debug level for rule group?
fact
VigilEnt Security Agent for Unix 5.0
fact
Unix Manager 5.0
fix
Yes. Individual rules will continue to log debug information in the
rule-group.err
located in ./vsaunix/{OS}/vsau/local/tmp
file even if debug for the rule group itself is turned off. However, there may not be enough debug info to troubleshoot an issue since the rule group debug controls all activity for all rules in the group.note
For more information, see the following NetIQ Knowledge Base articles:
- NETIQKB47491: "How do I turn debug on or off for rules or rule groups?" at https://www.netiq.com/kb/esupport/consumer/solutionarea.asp?id=NETIQKB47491.
- NETIQKB47496: "How do I clean up the debug files on the Unix agent?" at https://www.netiq.com/kb/esupport/consumer/solutionarea.asp?id=NETIQKB47496.
Additional Information
Formerly known as NETIQKB47424