Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
citrix:ad:pbis:trouble:log [2024/05/08 11:42] jscitrix:ad:pbis:trouble:log [2024/05/17 07:14] (current) – [Log Level] js
Line 2: Line 2:
 \\  \\ 
 \\  \\ 
-=== Documentation Website ===+==== Documentation Website ====
 [[https://www.beyondtrust.com/docs/ad-bridge/how-to/troubleshoot/agent/logging/index.htm]] [[https://www.beyondtrust.com/docs/ad-bridge/how-to/troubleshoot/agent/logging/index.htm]]
  
 +==== Services =====
 +^Services^Description^
 +|eventfwd|The event forwarding service. Generate a debug log to verify that the service is receiving events and forwarding them to a collector server.|
 +|eventlog|The event collection service. Generate a debug log for eventlog to troubleshoot the collection and processing of security events|
 +|gpagent |The Group Policy agent. Generate a debug log for gpagent to troubleshoot the application or processing of Group Policy Objects (GPOs).|
 +|lsass |The authentication service. Generate a debug log for lsass when you need to troubleshoot authentication errors or failures.|
 +|lwio |The input-output service that manages interprocess communication.|
 +|lwpkcs11 |A service that aids in logging on and logging off with a smart card. Gather logging information about it when there is a problem logging on or logging off with a smart card.|
 +|lwreg |The AD Bridge registry service. Generate a debug log for lwreg to troubleshoot ill-fated configuration changes to the registry.|
 +|lwsc |The smart card service. Gather logging information for the smart card service when card-insertion or card-removal behavior is other than expected.|
 +|lwsm |The service manager.|
 +|netlogon |The site affinity service that detects the optimal domain controller and global catalog. Generate a debug log for netlogon when you need to troubleshoot problems with sending requests to domain controllers or getting information from the global catalog.|
 +|PAM |The pluggable authentication modules used by AD Bridge. Create a debug log for PAM when you need to troubleshoot logon or authentication problems.|
 +|reapsysl |Part of the data collection service. Capture a debug log for reapsysl to investigate the collection and processing of events.|
 \\  \\ 
 \\  \\ 
-=== View Log Settings ===+==== View Log Settings ====
 To view the current level and target of logging of a service, enter the following command: To view the current level and target of logging of a service, enter the following command:
 <code bash>/opt/pbis/bin/lwsm get-log <service></code> <code bash>/opt/pbis/bin/lwsm get-log <service></code>
Line 21: Line 35:
 \\  \\ 
 \\  \\ 
-=== Target File === +==== Target File ==== 
 +You can use the following command to change the log target for a particular service and facility to log to a file:
 <code bash>/opt/pbis/bin/lwsm set-log-target <service> <facility> file <path></code> <code bash>/opt/pbis/bin/lwsm set-log-target <service> <facility> file <path></code>
  
 Example: Example:
 <code bash>/opt/pbis/bin/lwsm set-log-target lsass - file /var/log/lsass.log</code> <code bash>/opt/pbis/bin/lwsm set-log-target lsass - file /var/log/lsass.log</code>
 +
 +You can use the following command to change the log target for a particular service and facility to the syslog:
 +<code bash>/opt/pbis/bin/lwsm set-log-target <service> <facility> syslog</code>
 +
  
 \\  \\ 
 \\  \\ 
-=== Log Level ===+==== Log Level ====
  
 <code bash>/opt/pbis/bin/lwsm set-log-level <service> <facility> <loglevel></code> <code bash>/opt/pbis/bin/lwsm set-log-level <service> <facility> <loglevel></code>
Line 43: Line 61:
  
 Example: Example:
-<code bash>/opt/pbis/bin/lwsm set-log-level lsass – debug</code>+<code bash>/opt/pbis/bin/lwsm set-log-level lsass debug</code>
  
  
 +\\ 
 +\\ 
 +==== Generate Support Bundle ====
 +The AD Bridge support script copies system files that AD Bridge needs to function into an archive
 +<code bash>/opt/pbis/libexec/pbis-support.pl</code>
 +
 +It generates a tar gz file in /tmp named with <wrap em>pbis-support-<hostname>-<datetime>.tar.gz
 +</wrap>