The logging section settings control how logging occurs for the agent. These settings can also be changed manually for an individual host using a text editor.
enabled Key
Use the enabled key to enable or disable logging. Valid values are true (enable logging) and false disable logging). The default is false.
Change this setting using one of the following methods:
Web UI (see Enabling and Disabling the Agent Logging Policy).
API custom configuration channels (see Using API Custom Configuration Channels).
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).
log_level Key
The log_level key specifies the level of data logged. Valid values are debug (the highest volume of log lines), info, notice, warn, err, crit, alert, and emerg (the lowest volume of log lines). The default is info.
Change this setting using one of the following methods:
Web UI (see Setting the Minimum Logging Level).
API custom configuration channels (see Using API Custom Configuration Channels).
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).
log_mask Key
The log_mask key enables component-level logging for any of the following components. When more than one component is specified, separate the component names with colons (:).
UVPROC enables logging of calls to libuv read/write functions.
SSLPROC enables logging of SSL functions.
QUEUE enables logging of internal queue usage.
JOB enables job-related logging.
Change this setting using one of the following methods:
API custom configuration channels (see Using API Custom Configuration Channels).
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).