To configure diagnostic log level through the Web UI:

1. Login to the AC Server Web Management Console.
2. Go to Logs > Maintenance.
3. In the Case Diagnostic Tool Logs section, click the Diagnostic Log Level drill-down to change the log level of each log type (Server or Endpoint).
4. Select the log level between TRACE (most verbose) to ERROR (least verbose).
5. Click Save to keep the settings.

To configure diagnostic log level through the global configuration file:

1. Login to the AC Server.
2. Open services console (services.msc) and stop "Trend Micro Endpoint Application Control Server Service".
3. Go to "%ProgramFiles%\Trend Micro\Endpoint Application Control\AcServer-Data\config" and open global-configuration.xml using Notepad.
    

   Remember to create a backup copy of the XML file before making any changes.
4. Set the following:

   Server-side Log Level

   <property name="acserver.server.diagnostics.log.level" value="LOG-LEVEL">

   Agent-side Log Level

   <property name="client.diagnostics.log.level" value="LOG-LEVEL">

   The "LOG-LEVEL" can either be "TRACE", "DEBUG", "INFO", "WARN", "ERROR"

5. Save and close the notepad.
6. Restart the "Trend Micro Endpoint Application Control Server Service".

Log Storage:

[Server Log]

%ProgramFiles%\Trend Micro\Endpoint Application Control\AcServer\logs
%ProgramFiles%\Trend Micro\Endpoint Application Control\AcServer-Data\logs

[Agent Log]

%ProgramFiles%\Trend Micro\Endpoint Application Control Agent\ac_logs

After collecting the logs, be sure to reset the LOG-LEVEL to "ERROR" (least verbose) to conserve local disk space.