Agent Logs¶

Starting from version 5.6, agents automatically collect workstation logs and send them to the server by administrator request.

The automatic logging system:

allows you to obtain logs without remotely connecting to a workstation or changing the configuration
prevents accidental log disabling.

Logs are continuously collected locally. To upload logs to the server:

Go to Control Panel → Computers.
Select all or select individual computers to collect logs from.
Go to the Perform action menu.
Click Download logs.

The agent will send all collected logs as a System Log event. The data amount depends on the number of logs collected since the last request.

Note

If the computer is unavailable at the time of the request, the logs will be sent the next time the computer connects to the network.

All agents transmit basic logs:

agent operation
agent configuration
previous agent configuration
system information
antivirus scan

Windows agents have additional logs covering diagnostics, network activity, system services, user actions, and running processes. Additional logs allow you to identify problematic settings and possible conflicts with other software.

Local Agent Log¶

May be required in case of unusual agent behavior. For agent versions up to 2555, logs are located at:

C:\Windows\SysWOW64\TimeControlSvc\Debug_Agent.log

Starting with agent version 2557, the log location has been changed:

C:\Windows\SysWOW64\TimeControlSvc\Logs\Debug_Agent.log

Windows Remote Installer Logs¶

Located on the computer from which the installation was performed:

C:\Users\you_user\AppData\Local\Temp\Debug_InstallerUI.log

On a remote computer:

C:\Windows\Debug_AuxStaffCopSvc.Log

Configuration Logs¶

Configuration log location:

C:\Windows\System32\config\systemprofile\AppData\Roaming\TimeSvc3\cfg.log

Linux Agent Logs¶

Obtained using the following command:

sudo /usr/share/staff/agent zip

Live log viewing

sudo /usr/share/staff/agent tail

Outputting logs to console:

sudo /usr/share/staff/agent log

macOS Agent Logs¶

Agent log location:

/Library/Caches/com.atomsec.staff/staff.log
/tmp/staff.err.log

Replace and Extend Mask Paths¶

/Library/Caches/com.atomsec.staff/staff.conf
/Library/Caches/com.atomsec.staff/staff_filemon.log*
/Library/Caches/com.atomsec.staff/subtleties.txt
/Library/Caches/com.atomsec.staff/staff.log*
/tmp/staff*.log

Example log command:

(sudo tar -Pczf - /Library/Caches/com.atomsec.staff/staff.conf /Library/Caches/com.atomsec.staff/staff*.log* /tmp/staff*.log /Library/Caches/com.atomsec.staff/subtleties.txt) > macos-logs-$(date +"%d-%m-%Y").tar