14.13 Security Logs

While using ZENworks Control Center, if any securiSection 14.0, Designty verification failure or any other security information, then it will be logged in the server-security-messages.log and loader-security-messages.log files. Each message is assigned a severity level: information, warning, error, or debug.

Logging

Any security exceptions are logged in security logger. All other exceptions are logged in servicemessages.log or loader-messages.log.

The server-security-messages.log and loader-security-messages.log files are available in the following location:

  • Linux: /var/opt/microfocus/log/zenworks/admin-mgmt and /var/opt/microfocus/log/zenworks/client-mgmt

  • Windows: %ZENSERVER_HOME%\logs\admin-mgmt and %ZENSERVER_HOME%\logs\client-mgmt

14.13.1 Quarantine Folders

The quarantine folder stores any file with a security verification failure. Any such file that gets uploaded to the server and fails with security verification or any other unknown reason, will be saved in a quarantine folder.

The path to the quarantine folder is: <collectionDir>/quarantine/<folderOfProcessor>.

For example, for windowsmdm the path is <collectionDir>/quarantine/windowsmdm.

You can view all the quarantine files in the quarantine folder available in the following path:

  • Windows: %ZENSERVER_HOME%\work\collection

  • Linux: /var/opt/microfocus/zenworks/collection/

The files available in the quarantine folder are always retained, in case any analysis needs to be done.

NOTE:You should manually cleanup the quarantine folders at regular intervals.

14.13.2 Changing the Message Log Level

By default, your ZENworks administrator controls what types of messages are stored in the message log file. If an administrator needs to change the log level setting so that additional information is logged, perform the following:

  1. Go to the log4j2.properties file in the following location:

    • On Linux: /etc/opt/microfocus/zenworks/tomcat-conf/

    • On Windows: %ZENSERVER_HOME%\services\zenserver\conf\

  2. Open the properties file, and then depending on the required log level setting, update the following field to Errors, Warning, Info, or Debug:

    logger.securityLogger.level = INFO