Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

How to Collect a HAR File and HTTP Error Logs Using Internet Explorer

How to Collect a HAR File and HTTP Error Logs Using Internet Explorer

Environment

  • Internet Explorer: All Supported Versions

Objective

Capture diagnostic logs from a web browser for UI troubleshooting using Internet Explorer

Resolution

  1. Open Internet Explorer
  2. Go to the page where the issue occurs
  3. Press F12 on the keyboard to open Developer Tools
  4. Click the Network tab
  5. If the triangle in the left-hand corner is not grey, select the triangle to begin recording events
  6. Reproduce the issue
  7. Once done, use Ctrl+S or select the save icon to save the HAR capture
  8. Check for and save HTTP Error details
    1. For any errors observed above, note the Request URL and HTTP error number (4## or 5##)
    2. Select the Console tab
    3. Locate the error number tied to the Request URL
    4. Right-click matching error and click "Save As..."
    5. Set name of file, including at least HTTP error number, and save file to your computer
      Example
      Original filename: defense-prod05.conferdeploy.net-1646930859819.log
      
      Updated filename: 400_defense-prod05.conferdeploy.net-1646930859819.log
  9. Attach the HAR file and HTTP Error file to the case, or use CB Vault if the file is larger than 25 MB

Additional Notes

  • If the error "The network collection agent failed to start" is encountered when moving to the Network tool, refer to the Known Issues section of this guide for a solution - Legacy Microsoft Edge developer documentation - Legacy Microsoft Edge developer docs
  • All credentials and session cookies within a HAR file should be removed before sharing with Carbon Black
    • The HAR file is a text file, it can be opened in a text editor and searched for the SESSION cookie value and replaced with <REDACTED>
    • This can also be done for passwords and API tokens if they were part of the recording
    • It's also recommended to logout from the Carbon Black session after recording a HAR session. This is a precaution that should invalidate session IDs if any were missed.
  • HAR Files under 25 MB can be attached directly to a Carbon Black Technical Support case. 
  • Files larger than 25 MB should be uploaded to CB Vault.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-10-2022
Views:
754