000032878 - How to change the UCF logging level in RSA SecOps 1.3

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on May 1, 2019
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000032878
Applies ToRSA Product Set: Security Management
RSA Product/Service Type: Security Operations Management (SecOps)/Security Incident Manager/Unified collector Framework (UCF)
RSA Version/Condition: 1.3
IssueNeed to reduce or boost logging in collector.log file to see what is occurring with the UCF service.
ResolutionTo change the logging level, follow the steps below.
  1. Stop UCF service.
  2. Navigate to:  (root may vary) C:\Program Files\EMC\RSA\SA IM integration service\config\collector-log4j
  3. Edit the following parameter:

    <logger name="com.rsa">  <level value="debug" /> </logger>

    NOTE:  Options for the level value are:  warning, info or debug
  4. Save the file.
  5. Restart UCF service.