Symantec Security Information Manager (SSIM) Ecosystem Diagnostic Tool

Products

• Security Information Manager

Issue/Introduction

The ESDiag tool was created to ease the task of gathering debug information that is critical to quickly diagnosing and solving many kinds of customer support issues. It is capable of switching Collectors back and forth between logging in debug mode and the normal default mode. It can also gather all necessary Agent and Collector log files on the local filesystem and compress them into a single file that is ready to be passed on to Support.

 

Resolution

For windows based servers

Open a dos prompt and navigate to the directory containing the esdiag tool.

To set a specific collector to log level debug:

   C:\esdiag-1.4>esdiag.bat -u <collector directory name>

To set all collectors to log level debug:

   C:\esdiag-1.4> esdiag.bat -u all

Let this run until the issue occurs, gather the information and set everything back to default logging using the following commands:

    C:\esdiag-1.4> esdiag.bat -g
    C:\esdiag-1.4> esdiag.bat -d all

For SSIM appliance or other linux/unix hosts

Download and copy the tool to the computer collector is running on. If it is on the SSIM appliance copy it to the /tmp folder and extract it. From a putty session or a DRAC connection login and ‘su – ‘ to root, then cd into the /tmp directory and run this command
 

To set a specific collector to log level debug:

    # bash esdiag.sh -u <collector directory name>

To set all collectors to log level debug:

    # bash esdiag.sh -u all

Let this run until the issue occurs, gather the information and set everything back to default logging using the following commands:

    # bash esdiag.sh -g
    # bash esdiag.sh -d all

On either host, the result will be a zip file called esdiag_<date>-<time>

Technical Information
Updated tool on 20091027