How to generate star platform debug logging for Endpoint Protection Mac client
search cancel

How to generate star platform debug logging for Endpoint Protection Mac client

book

Article ID: 231739

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

How to generate star platform debug (AKA ccx) logging for the SEP for Mac client

Environment

SEP for Mac

macOS

Resolution

If the 'Symantec' folder doesn't exist at '/Library/Logs/Symantec/', it needs to be created before the logs will be generated

  1. Copy star_platform.logging.conf (attached at bottom of this article) to /etc/symantec

  2. Kill the SEP systemextension process (com.broadcom.mes.systemextension). Make sure it restarts with a different PID.

  3. Reproduce issue

Logging will be located at /Library/Logs/Symantec/star_platform.etl.

There may be a star_platform.etl.bak, if the log file rolls over.

Collecting a GatherSymantecInfo report.

Stop ccx logging by removing star_platform.logging.conf from /etc/symantec and killing the systemextension process

Attachments

1641498780844__star_platform.logging.conf get_app