There may be times the Snare Support team require debug logs for investigation. Ensure you start a command prompt as Administrator and navigate to the folder where Snare is installed, to retrieve the logs.
To retrieve debug logs for Snare, use one of the following two methods can be used:.
- Generating Debug Log from the Agent Web UI
...
| Info |
|---|
In case Agent Web UI is disabled, the Agent version is earlier than 5.6.0, or Support has explicitly requested to generate the debug log for longer period of time, please use the following instructions |
> net stop snare
> snarecore -c -d9 > mysnare.log 2>&1Where <mysnare.log> may be any name given to the log file. Continue to use Snare until you have an error, or enough time for your events to be processed. After this time, enter CTRL-C to end the debug log.
> net start snare
Attach the log to your Snare Support issue.
...
To retrieve debug logs for Snare as it communicates with the Snare Agent Manager:
> net stop snare
> snarecore -c -d SAM:trace > mysnare.log 2>&1Where <mysnare.log> may be any name given to the log file. Continue to use Snare until you have an error, or enough time for your events to be processed. After this time, enter CTRL-C to end the debug log.
> net start snare
Attach the log to your Snare Support issue.
...