About WSS Agent Support logs

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

As an administrator, I would like to know the following about the WSS Agent logs:

1. What are WSS Agent (WSSA) support logs?
2. Where are the logs located on a drive?
3. How is it used? What information does it provide? 

Environment

Symantec Agents

Resolution

WSS Agent support logs provide all connectivity logs of the agent. The following information is helpful to troubleshoot WSSA issues.

It logs the below data.

• User activity performed on the agent. Ex. disabled/enabled, reconnection.
• Connection status to Cloud SWG. Ex. Passive or Active, connection over system proxies
• Cloud SWG Datacenter (DC) and its IP, the agent is connected to. Ex. GCAMO-199.19.253.170 is Canada Montreal DC.
• Connectivity errors if any. 
• Customer ID
• Cloud Firewall Service (CFS) status. Enabled or not. 
• User authorization information, user ID.
  
  

WSSA logs can be found in .txt format under the below location:

• Windows: C:\ProgramData\Symantec WSS Agent
• macOS: /Library/Application Support/Symantec WSS Agent

Notes:

• The retention period of log files is 7 days. After the 7 days those files will be erased automatically from the drive.
• WSS Agent does not show a debug log message if it is >2MB to avoid being too bulky. It can consume a lot of CPU as the log messages get rendered in "formatted" text by WSSA if it gets too big. In this case, one might need to go to the above folders to get the logs.