When you specify the minimum xAgent logging level, all log messages for that level and higher severity levels are logged. For example, if you specify the minimum xAgent logging level to be CRIT for Critical events, only log messages for Critical, Alert, and Emergency events are logged; log messages for all other event types are not logged. By default, the minimum xAgent logging event level is INFO (Information).
You can set the minimum logging level for the xAgent logging policy in the xAgent default policy or a custom policy. This section covers how to set the minimum logging level using the Web UI. See the Endpoint Security (HX) REST API Guide for more information on setting the minimum logging level using the API.
Setting the minimum logging level for the xAgent Logging Policy
Log in to the Web UI as an administrator.
From the Admin menu, select Policies to access the Policies page.
In the Policies table, click the Agent Default Policy link to go to the Edit Policy page.
Select the Agent Logging tab.
.jpg)
Verify that the Agent Logging ON/OFF switch is set to ON.
Click the Agent log level menu and select the agent log level. See Understanding Agent Logging Levels for more information.
Enter the size of the log database in the Log Storage box.
Click Save.
Log in to the Web UI as an administrator.
From the Admin menu, select Policies to access the Policies page.
Click CREATE CUSTOM POLICY.
Enter a policy name in the Name field and a policy description in the Description field. Select the Agent Logging tab.
Click the CATEGORIES button.
Select the Agent Logging checkbox to access the Agent Logging tab.
Verify that the Agent Logging ON/OFF switch is set to ON.
Click the Agent log level menu and select the agent log level. See Understanding Agent Logging Levels for more information.
Enter the size of the log database in the Log Storage box.
Click Save.