Logs on the Endpoint Security Server can be found under /var/log/supervisor/ioc-streaming*.log
You can adjust the log detail levels in the log messages using the IOC Streaming server module. The agent side logging details are picked up from the Agent Logging configuration policy and are not independently adjustable for the IOC Streaming module.
The following table describes the logging options that are available.
Note
Each log level option include messages generated by the level below it. For example, alert includes emergency messages, critical includes Alert and emergency messages. Therefore, the lowest severity logging level will produce the highest volume of messages.
For more information regarding access to the log file and notifications related to its content, refer to CLI Command Reference .
Logging Level | Description |
|---|---|
Debug | Logs debugging messages. This logging level is used when debugging a program. It includes all the types of logging messages. |
Info | Logs informational messages about regular system processing. |
Notice (default) | Logs notification messages that identify minor problems on the host endpoint. This does not inhibit regular agent function for which defaults are used until the problem is resolved |
Warning | Logs warning messages that identify non-critical and correctable errors on the host endpoint, such as a specified value that is too large. |
Error | Logs error messages that identify program errors on the host endpoint, such as when a file cannot be found. |
Critical | Logs critical messages that identify serious conditions on the host endpoint, such as hard drive errors. |
Alert | Logs messages that identify crucial conditions on the host endpoint that require immediate remediation, such as a corrupted system database. |
Emergency | Logs system failure messages that identify total system failures on the host endpoint. These system failures usually cause the agent to stop functioning. |