Arellia log file locations

Owned by Anonymous
Last updated: Jan 05, 2016 by Max Pinion (Deactivated)

Issue

Where does Arellia store its logs?

Solutions

Solution 1: Symantec Management Platform (SMP)

Arellia logs are stored in the same location as the Notification Server.

The "a.log" (the SMP server logs) are stored here:
SMP 7.0: Program Files\Altiris\Notification Server\Logs
SMP 7.1: ProgramData\Symantec\SMP\Logs (Note: ProgramData is hidden by default and you may need to "Show hidden files and Folders.")

Solution 2: Symantec Management Agent

Arellia logs are stored in the same location as the Symantec Management Agent.

The "agent.log" and "acs.log" (the Symantec Management Agent logs) are stored here:
XP/2003: Program Files\Altiris\Altiris Agent\Logs
Vista/Windows 7/Server 2008: Users\Public\Documents\Altiris\Altiris Agent\Logs
  OR ProgramData\Symantec\Symantec Agent\Logs

Additional information

Under the 6.0 Altiris Agent line, the location can be determined in the Registry at "HKLM\SOFTWARE\Altiris\eXpress\Event Logging\LogFile," under the "FilePath" location. By default, the installation folder is C:\Program Files\Altiris\Altiris Agent\Logs.

However, due to enhanced security in Windows Vista and later operating systems, where processes that run with User credentials do not have elevated rights to modify files in the Program Files location, this path cannot be used.  Instead, Windows mirrors that location to a virtual store, which appears to be in C:\Program Files by our Log viewer.  The path is specific to the User account the process runs as, meaning entries created during a Software Delivery or Inventory job run as a User account, will be stored under that User profile, as follows:

%UserProfile%\AppData\Local\VirtualStore\Program Files\Altiris\Altiris Agent

Because of this security model, in Symantec Management Platform 7.0, the default Agent log path is already under the User folder.  Found in the Registry at "HKLM\SOFTWARE\Altris\Altiris Agent\Event Logging\LogFile", under the "FilePath" entry, all logs can be written to this location:

C:\Users\Public\Public Documents\Altiris\Altiris Agent\Logs\

Also View Set SMP 7 agent logging level to a high state

Viewing the Agent Logs