000031342 - How to get RSA Data Loss Prevention Endpoint logs for all components

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 6, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031342
Applies ToRSA Product Set: Data Loss Prevention (DLP)
RSA Product/Service Type: Endpoint
RSA Version/Condition: 9.6
Platform: Windows 2008 R2
IssueHow to get DLP Endpoint logs for all components:
  • Root endpoint coordinator [rEPC] server
  • Endpoint coordinator [EPC] server
  • Endpoint machine hosting endpoint agent
TasksFor  Root endpoint coordinator [rEPC] Logs:
Path:- C:\Program Files(x86)\RSA\EndpointCoordinator\Logs\
Log Files:-
1- EpcService
2- joinservice
3- joinaudit
4- DLPInstall

Path:- C:\Program Files(x86)\RSA\EndpointCoordinator\RabbitMQ\AppData\log
Log files:- rabbit@localhost

For Endpoint coordinator [EPC]  logs: 
Path:- C:\Program Files(x86)\RSA\EndpointCoordinator\Logs\
Log Files:-
1- DLPInstall
2- EpcService

Path:- C:\Program Files(x86)\RSA\EndpointCoordinator\RabbitMQ\AppData\log
Log Files:- rabbit@localhost

For Endpoint-Machine  Agent logs:
Path:- C:\Program Files(x86)\RSA\Enforce\logs
Log Files:- 
1- ep_security 
2- messages_EP