Set the Aggregator logging level to FINEST on the Detection Server

Products

• Data Loss Prevention
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Email
• Data Loss Prevention Network Discover
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Discover Suite
• Data Loss Prevention Core Package

Issue/Introduction

There are times when the default logging level is not sufficient enough to track aggregator activity. 

Resolution

To increase the aggregator logging to FINEST follow these steps:

1. Login to the server
2. Browse to
   \Symantec\DataLossPrevention\DetectionServer\<version>\Protect\config
3. Modify the AggregatorLogging.properties file
4. Make the following changes: 

.level = INFO

         to

.level = FINEST

 

java.util.logging.FileHandler.limit = 5000000

to

java.util.logging.FileHandler.limit = 10000000

 

java.util.logging.FileHandler.count = 20

to

java.util.logging.FileHandler.count = 99

5. Save the file
6. Restart the service
   Symantec DLP Detection Server Service 

The aggregator logging will now include the FINEST level details in it.