Trellix Agent logs

Trellix Agent log files contain actions triggered or taken by the Trellix Agent.

File names in this list reflect Trellix Agent version 5.5.0 for Windows.

Trellix Agent 5.5.0 file name	Log type	Location	Description
`masvc_<hostname>.log`	Server	`[Agent DATA Path]\logs`	Generated when `masvc.exe` is used. The file contains information related to: Property collection Policy enforcement Scheduling of tasks Agent server communication Update sessions
`macmnsvc_<hostname>.log`	Trellix Agent	`[Agent DATA Path]\logs`	Generated when `macmnsvc.exe` is used. The file contains information related to: Peer-to-Peer server SuperAgent Wake-up RelayServer
`macompatsvc_<hostname>.log`	Trellix Agent	`[Agent DATA Path]\logs`	Generated when `macompatsvc.exe` is used. The file contains information related to the compatibility of managed products with Trellix Agent services.
`masvc_<hostname>_backup_ <backupcountnumber>.log`	Trellix Agent	`[Agent DATA Path]\logs`	Generated as backup files for agent services.
`marepomirror.log`	Server		Generated when `marepomirror.exe` is used. The file contains information related to mirroring of the repository.
`FrmInst_<hostname>.log`	Trellix Agent	`%temp%\McAfeeLogs`	Generated when `FrmInst.exe` is used to install the Trellix Agent. This file contains: Informational messages Progress messages Failure messages if installation fails
`McScript.log`	Trellix Agent Debug	`[Agent DATA Path]\logs`	Contains the results of script commands used during agent deployment and updating. To enable the DEBUG mode for this log, set this DWORD value on the client’s registry key: `HKEY_LOCAL_MACHINE\SOFTWARE\NETWORK ASSOCIATES\TVD\SHARED COMPONENTS\FRAMEWORK\DWDEBUGSCRIPT=2` Note Delete this key when you finish troubleshooting.
`MFEAgent.msi. <system time stamp>.log`	Trellix Agent	`%temp%\McAfeeLogs`	Contains details about the MSI installation of the agent.
`UpdaterUI_<system>.log`	Trellix Agent	`%temp%\McAfeeLogs`	Contains details about the updates to managed products on the client system.

Trellix Agent error logs

When the Trellix Agent traps errors, they are reported in Trellix Agent error logs. These error logs are created at %temp%\McAfeeLogs during installation. Trellix Agent error logs are named using the convention <filename>_error.log.

For example, when performing client tasks, information is normally logged in McScript.log. Errors that occur are logged in McScript_error.log.

Error logs only contain details about errors.

Note
After installation, the Trellix Agent logs are located in %ProgramData%.