How to collect and upload logs for Symantec Cloud Workload Protection for Storage on Microsoft Azure

Products

• Cloud Workload Protection for Storage

Issue/Introduction

I need to collect the logs from the Cloud Workload Protection for Storage (CWP:s) Controller Unit (CU) and Protection Unit (PU) instances running on Azure, and upload them to a Broadcom support case.

Resolution

Note: Before performing these steps, ensure that the appropriate network permissions have been created to allow communication to the storage account.

The steps to collect logs are as follows:

1. Launch the Azure cloud shell and set the context to the subscription where log collection is required.
   • az account set --subscription <subscription_id>  The subcription id can be found by selecting the resource group in azure.
2. Download and extract the attached package and upload the two .sh scripts to the Azure shell.
   • The cloud shell can be found at the top right of the azure console.
3. On the cloud shell, run the following commands-   

cd $home 
chmod 777 log_collect.sh
./log_collect.sh

4. Provide the resource group name where the CWP storage – Azure Blob is deployed.
5. This will create a folder under the container "allevents" and upload the logs.
   • Open the default container created during install and select allevents.  Open the folder and select the logs files created.  Right click to download them.

Additional Information

The technical documentation has a link to an article to download a log collector utility that does not work correctly.   Please use the log collector attached to this article for gathering logs on CWPS for Azure.