App Control: How to Collect Historical Agent Logs on Windows (Locally)

[#1]

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows: All Supported Versions

Objective

To collect Agent Historical Logs for technical support cases, ideal for unexpected blocks or other issues that cannot be recreated. 

Resolution

1. Login to the relevant endpoint and from an administrative command prompt issue the commands:

   cd "C:\Program Files (x86)\Bit9\Parity Agent"
   dascli capture "C:\Temp\%computername%-diagnostics.zip"

2. Once the capture is completed upload the logs to the Vault and update the support case.

Related Content

App Control: How to Collect Historical Agent Logs (Remotely)
App Control: How to Collect Logs for Troubleshooting Disconnected Windows Agent (Locally)
App Control: How to Collect Logs for Troubleshooting a Disconnected Linux Agent (Locally)
App Control: How To Collect Agent Performance Logs on Windows (Locally)
App Control: How to Collect High Debug Agent Logs on Windows (Locally)
App Control: How to Gather a CSV Export of Events from the Console