Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How to Collect High Debug Server Logs for Web Console or API Errors

App Control: How to Collect High Debug Server Logs for Web Console or API Errors

Environment

  • App Control Console: All Supported Versions

Objective

  • "Something went wrong!" page error
  • "API authentication failed. Some pages will not be functional. Please try to log out and log in again."
  • "API appears not to be accessible."
  • Username or password incorrect

Resolution

  1. Log in to the App Control Console and navigate to https://ServerAddress/support.php > Diagnostics
  2. Click the Snapshot Server Logs button to write existing logs and start a fresh log file.
  3. Set Server Logging as follows:
    • Logging Duration: 30 Minutes
    • Debug Level: High
    • Reporter Log Level: Minimum (default)
    • Script Debug Level: Minimum (default)
    • Active Directory Debug Level: Minimum (default)
    • Enable SQL Trace: Check the box
    • Start Logging
  4. Navigate to https://ServerAddress/shepherd_config.php and change the following property accordingly:
    DebugConsoleCommunication: true
    
  5. Reproduce the error several times
  6. Return to https://ServerAddress/support.php > Diagnostics > Stop Logging Now.
  7. Click on “Available log files" from the right menu > Related Views
  8. Save all files with today's date:
    • API-TIMESTAMP.log
    • PHPErrors-TIMESTAMP.log
    • ReporterLog-TIMESTAMP.log
    • ServerLog-TIMESTAMP.bt9
    • SQLTrace-TIMESTAMP.csv
  9. Return to https://ServerAddress/shepherd_config.php and change the following property accordingly:
    DebugConsoleCommunication: false
  10. Please collect the most recent IIS log from the App Control server typically located here:
    %SystemDrive%\inetpub\logs\LogFiles\
  11. Optionally, a HAR capture while reproducing can be very helpful and may be requested at a later time
  12. Please zip all collected data, and upload to the Vault.

Additional Notes

App Control Server 8.8.6 and earlier: Restart the App Control Reporter service due to a known issue causing it to stop sending events after debugging finishes.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-09-2018
Views:
2627
Contributors