How to enable debug logging for Quarantine Server

Article:TECH99104  |  Created: 2001-01-05  |  Updated: 2013-09-26  |  Article URL http://www.symantec.com/docs/TECH99104
Article Type
Technical Solution

Product(s)

Environment

Issue



You need to enable debug logging on a computer that runs Central Quarantine Server.


Solution



You must edit the Windows registry to enable debug logging for QS.  The resulting log file is sometimes referred to as "the Avis log" or "the avistrace log."

To enable debug logging for Quarantine Server

  1. In the Windows Registry Editor, go to the following key:

    HKEY_LOCAL_MACHINE/Software/Symantec/Quarantine/server/avis

    on a 64-bit server (supported with Quarantine Server 3.6.7300 and higher) the key is:

    HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Symantec/Quarantine/Server/Avis
     
  2. In the right pane, double-click the traceEnable value.
  3. In the Value data field, type 1 and then click OK.
  4. In the right pane, confirm that the traceFilter value is set to -1.
  5. In the right pane, confirm that the traceSeverity value is set to debug.
  6. In the right pane, note the file name in the traceFilename value.
    This value contains the location of the log file. By default, the value is set to the following location:

    C:\Program Files\Symantec\Quarantine\Server\Avistrace.txt

    On a 64-bit server: 

    C:\Program Files (x86)\Symantec\Quarantine\Server\Avistrace.txt
     
  7. In the right pane, double-click the configurationChangeCounter value.
  8. In the Value data box, increment the value by 1.
    For example, if configurationChangeCounter is set to 4, then change the value to 5.
  9. Click OK.
  10. Exit the Registry Editor.
  11. It may be necessary to restart the Symantec Central Quarantine service to begin log generation.



When you finish troubleshooting, disable debug logging.

To disable debug logging for Quarantine Server

  1. In the Windows Registry Editor, go to the following key (or its 64-bit equivalent):

    HKEY_LOCAL_MACHINE/Software/Symantec/Quarantine/server/avis
     
  2. In the right pane, double-click the traceEnable value.
  3. In the Value data field, type 0
  4. Click OK.
  5. In the right pane, double-click the configurationChangeCounter value.
  6. In the Value data box, increment the value by 1.
    For example, if configurationChangeCounter is set to 4, then change the value to 5.
  7. Exit the Registry Editor.

 



Legacy ID



2001010512054548


Article URL http://www.symantec.com/docs/TECH99104


Terms of use for this information are found in Legal Notices