How to change the log folder for SPE 9.x REST API

Products

• Protection Engine for Cloud Services

Issue/Introduction

You seek to change the location where Symantec Protection Engine (SPE) REST API stores its log files.

Environment

- SPE 9.x

Resolution

1. Navigate to the RESTAPI folder, C:\Program Files\Symantec\Scan Engine\RESTAPI
2. Create a backup of the log4j2.xml file
3. Edit the log4j2.xml file
4. Change the following line from:
<Property name="LOG_FOLDER">./log</Property>

to

<Property name="LOG_FOLDER">C:\Program Files\Symantec\VALIDEXISTINGFOLDER</Property>

... or any valid existing folder name on a local hard drive.

5. Save the change and close the editor
6. In services.msc, right click on Symantec Protection Engine REST API service, then click Restart.
7. Look in the target folder. A new 0 byte SPE_REST_API.log file will appear, and new REST API activities will be logged in this and other files in the target folder.

Additional Information

Does this procedure work for other local drives?

This procedure is not yet tested for drives other than C:, but is expected to work, so long as the target folder is on a local rather than network drive.

 

Does this procedure work on Linux?

This procedure is not yet tested on Linux, but is expected to work to work so long as the target folder is on a local mount. Some steps may differ, such as using systemctl to restart the symcscan service.

 

I messed up. How do I revert?

Copy the backup file over the log4j2.xml file and then restart the same service to make the change effective.