Endpoint system-level logs and support bundle can be accessed and downloaded from the Cloud Services Portal and are used by network and security administrators to analyze BloxOne Endpoint query/response logs and to troubleshoot issues in BloxOne Endpoint. The log level can be set for specific endpoints or endpoint groups.
Downloaded Available log information includes the following information:
Container download, upgrade, restart events, and errors
BloxOne Endpoint connection status: connected, disconnected, and connection error (with an accompanying explanation)
Configuration change events
DNS query and response logs:
The default log level for BloxOne Endpoint is set to limit the number of events generated and reported.
A log level can be increased when an incident is triggered and an investigation of the incident ensues.
After the termination of an investigation, the logging level can be reduced to the default monitoring level.
Log level can be adjusted through the Cloud Services Portal or through the API.
The log level status for an endpoint can be viewed in the information panel and, optionally, through the table view.
...