Home / Security Manager Plus How to

Security Manager Plus How to

How to Enable Security Manager Plus target system logs in Agent mode
How to Enable Security Manager Plus target system logs in Agentless / Remote mode

How to Enable Security Manager Plus Agent Logs

Please follow these steps to Enable SMP Agent logs :
  1. Go to Admin ---> Agent Administration page
  2. Click 'Configure' link present next to Host Name column
  3. Select 'Debug' for 'Log Level' setting and then click 'Configure' button. 
  4. Once the Configuration is successful, the Agent will log all messages in C:\Program Files\AdventNet\SecurityManagerAgent\log directory in the Agent system
Alternatively, you can enable SMP Agent logs as follows :
  1. Go to the Agent system
  2. Stop SMP Agent
  3. Edit C:\Program Files\AdventNet\SecurityManagerAgent\agent.ini
  4. Change level=4 under [log] and save the file
  5. Start the Agent
Agent log level
Can have values 0 to 4.
0-OFF, 1-ERROR, 2-WARNING, 3-INFO, 4-DEBUG
When you set the level to 3, then Error, Warning & Info messages will be logged.
Similarly, when you set to 4, Error, Warning, Info & Debug messages will be logged by the Agent.

maxsize
The size in mega bytes for each log file.
A value of 1 indicates, the log file will be rotated when it reaches 1 MB size.
For e.g., when securitymanagerplus.log reaches 1 MB, it will be renamed to securitymanagerplus0.log and new logs will be written in securitymanagerplus.log

rollcnt
Indicates, how many log files will be rotated and stored.
Value 10 indicates, there will be 10 log files and the older logs will be deleted.
For e.g., there will be securitymanaerplus0.log, securitymanagerplus1.log etc., up to 10 log files.

Troubleshooting Agent

When SMP Agent is installed and started in a system, it should automatically show up in the Assets page in SMP web console.
If the Asset does not appear in the SMP web console, please check the following :
  1. During Agent installation, in the wizard, if you have given the SMP Server's host name instead of IP Address, please make sure the SMP Server's Host name resolution works in the agent system. ( Try the command "nslook SMP_Server_HostName" in the Agent system and see if it displays the proper IP Address of the SMP Server. ). If you have given the proper IP Address of the SMP Server, you can ignore this 'nslookup' step. [ You can change the SMP Server's Host name or IP Address in the "server.ini" file present in the Agent installation directory)
  2. If Agent is installed in SSL (TCP) Mode :
    1. Please check whether the Agent system has access to SMP Server's ports 9004, 6767 & 6262
    2. To check whether the ports are accessible,
      • Go to the Agent system and open a command prompt
      • Try the command :  telnet SMP_Server_IP 9004
      • If the above command says "unable to connect" or takes a long time and fails, then please make sure the port access is allowed by altering your firewall configuration. If the command says "Connected to SMP_Server_IP" and waits for input, then it means the connection is successful.
      • Similarly check for other ports
      • After making sure all the above ports are accessible from the Agent system, Re-start the Agent. It should appear in the Assets page in SMP web console.
    3. Please check whether the SMP Server system has access to Agent port 9005
  3. If the Agent is installed in HTTPS mode :
    1. Please check if Agent system has access to SMP Server's ports 6262 & 6767 ( Do a telnet as above and check )
    2. In HTTPS mode, the SMP Server does not need access to any Agent ports.
    3. Restart the Agent if you make changes in your firewall configuration to allow the above ports.
The list of ports needed for Server & Agent communication is also mentioned here : http://www.manageengine.com/products/security-manager/help/installation/ports-to-be-opened.html

How to Enable Security Manager Plus Agentless Logs
  1. Go to the target system
  2. Open registry editor (Run "regedit" command)
  3. Go to
    If it is a 64 bit system : HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AdventNet\Security Manager Plus\MiniAgent
    If it is a 32 bit system HKEY_LOCAL_MACHINE\SOFTWARE\AdventNet\Security Manager Plus\MiniAgent
  4. Change the registry value LogLevel=4



    Post a comment

    Your Name or E-mail ID (mandatory)

    Note: Your comment will be published after approval of the owner.



    		 RSS of this page