How to generate star platform debug logging for Endpoint Protection Mac client

Products

• Endpoint Protection

Issue/Introduction

How to generate star platform debug (AKA ccx) logging for the SEP for Mac client

Environment

SEP for Mac

macOS

Resolution

If the 'Symantec' folder doesn't exist at '/Library/Logs/Symantec/', it needs to be created before the logs will be generated

1. Copy star_platform.logging.conf (attached at bottom of this article) to /etc/symantec
   
   
2. Kill the SEP systemextension process (com.broadcom.mes.systemextension). Make sure it restarts with a different PID.
   
   
3. Reproduce issue

Logging will be located at /Library/Logs/Symantec/star_platform.etl.

There may be a star_platform.etl.bak, if the log file rolls over.

Collecting a GatherSymantecInfo report.

Stop ccx logging by removing star_platform.logging.conf from /etc/symantec and killing the systemextension process