Overview of debug logging for LiveUpdate in Symantec Endpoint Protection (SEP) for Mac.
How to enable debug logging, where are the logs, how to gather them, and what to look for when troubleshooting LiveUpdate for Mac.
Basic LiveUpdate logging in SEP for Mac is always enabled and can be found at the following location:.
Extended LiveUpdate debug logging for Mac can be enabled in SEP 14 by creating/editing the lux.logging.conf file.
Location: /Library/Application Support/Symantec/Silo/MES/LiveUpdate/Conf/lux.logging.conf
Suggested steps for editing this file (some of these steps will require Administrator authentication to complete):
logger.enabled=true logger.level=debug logger.sink=file,console logger.sink.file.filepath=/Library/Application Support/Symantec/Silo/MES/LiveUpdate/Logs/devlux.logSave changes.
Note: lux.logging.conf parameters are case sensitive.
When enabled, separate devlux_####.log files will be generated in the same location as other LiveUpdate logs, each suffixed with the PID of the LiveUpdate process for that session.
These logs are best gathered by using the GatherSymantecInfo tool, which will generate a report including other useful troubleshooting information which can be provided to Symantec if a technical support case is opened.
When looking the LiveUpdate logging, check the URLs that are being used to download content. If the URLs appear correct, try them in a web browser on a different Mac (to check if there are connectivity issues affecting only one machine). See Listing of External URLs which the Symantec Endpoint Protection Manager needs access to for complete functionality. Look also in logging for exact wording of any errors, which may be used when searching in Symantec's Knowledge Base.