[KB8059] Request log files from Windows clients in ESET PROTECT On-Prem

Issue

  • ESET Technical Support has requested a copy of a Windows log file from ESET PROTECT On-Prem

Details


Click to expand


Your ESET security application for Windows keeps logs of all scans that run on your computer. These scan logs are helpful to determine whether previous detections have been successfully cleaned or deleted. See below for more information about each type of log file:

  • Detections: Detailed information about infiltrations detected by your ESET application modules.
  • Events: Detailed information about all important actions performed by your ESET application.
  • Computer scan: Results of all completed manual or planned scans.
  • Blocked files: Contains records of files that were blocked and could not be accessed.
  • Sent files: Contains records of files that were sent to ESET LiveGrid or ESET LiveGuard Advanced for analysis.
  • Audit logs: Contains information about the date and time when the change was performed, the type of change, description, source, and user.
  • HIPS: A record of specific rules that the user marked for logging.
  • Firewall: Only in ESET Endpoint Security—displays all remote attacks on your computer detected by the firewall.
  • Network protection: Information about any attacks on your computer.
  • Filtered websites: List of websites that were blocked by Web access protection or Web control.
  • Antispam protection: Contains records related to email messages that were marked as spam.
  • Web Control: Only in ESET Endpoint Security—shows web pages that were blocked or allowed by Web Control, as well as how filtering rules were applied.

Solution

Related solutions: Home and small office users | Endpoint users | SysInspector users

Each ESET PROTECT On-Prem component performs logging. The components write information about certain specific events to log files. The location of log files varies depending on the component.

ESET PROTECT Windows Components Log files location
ESET PROTECT Server C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Logs\
ESET Management Agent
C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\

For more information, see Agent connection troubleshooting.
ESET PROTECT Web Console and Apache Tomcat C:\ProgramData\ESET\RemoteAdministrator\Tomcat\Logs\

For more information, see Apache Tomcat 9 logging documentation.
Rogue Detection Sensor C:\ProgramData\ESET\Rogue Detection Sensor\Logs\
ESET Bridge (HTTP Proxy)
 
ESET Bridge (applies to ESET PROTECT On-Prem versions 10.0 and later)
See ESET Bridge Online Help.
Earlier Windows operating systems C:\Documents and Settings\All Users\Application Data\ESET\

Visit the Online Help topic for log file locations in Windows, Linux, ESET PROTECT Virtual Appliance, and macOS.