Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Creating Thin Agent log files in Deep Security

    • Updated:
    • 19 Jan 2016
    • Product/Version:
    • Deep Security 8.0
    • Deep Security 9.0
    • Deep Security 9.5
    • Deep Security 9.6
    • Platform:
    • VMware vCenter 5.0
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Server R2
    • Windows 2008 Standard
    • Windows 2008 Standard 64-bit
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

For further analysis of an issue, it is useful to gather log file information on the Thin Agent, or vsepflt.sys, installed with VMware Tools on Windows OS.

Details
Public

vShield Endpoint thin agent logging is done inside the protected virtual machines. The following registry entries are read at boot time from the Windows Registry, and are polled periodically:

  • log_dest
  • log_level

The registry keys are found in the following locations:

  • In vShield 1.0 x86 and x64: HKLM\System\CurrentControlSet\Services\VFileScsiFilter\Parameters\
  • In vShield 5.x x86 and x64: HKLM\System\CurrentControlSet\Services\vsepflt\Parameters\

Both registry keys are DWORD bit masks that can be a combination of the following values:

  • log_dest:
    WINDBLOG 0x1
    VMWARE_LOG 0x2
  • log_level:
    AUDIT 0x1
    ERROR 0x2
    WARN 0x4
    INFO 0x8
    DEBUG 0x10

References:

Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1095416
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.