I have a script to pull the access protection log into kace as an uploaded document, but it won't upload correctly. There is a space when I try to upload the file and I con't figure out where it's coming from...

Here is the XML version of the script:

<verify on_failure="break" attempts="1">
   <file_exists path="C:\ProgramData\McAfee\DesktopProtection" file="AccessProtectionLog.txt" />
    <on_verify_success>
     <upload_file path="C:\ProgramData\McAfee\DesktopProtection" file="AccessProtectionLog.txt" />
    </on_verify_success>
   <on_verify_failure>
      <log_message type="status" message="No AccessProtectionLog.txt file found" /> 

And here is the script fail log:

Output Log

Running as: SYSTEM
File exists: C:\ProgramData\Application Data\McAfee\DesktopProtection\AccessProtectionLog.txt

Activity Log

Checking if file exists: C:\ProgramData\Application Data\McAfee\DesktopProtection\AccessProtectionLog.txt
Uploading file: C:\ProgramData\Application Data\McAfee\DesktopProtection AccessProtectionLog.txt

Debug Log

Running kbot: runkbot 111 1378830557r3
Validating kbot xml
Kbot xml C:\ProgramData\Dell\KACE\kbots_cache\111-1378830547r3_expanded.xml, Validation Success
Kbot Config Info - Start
id=111 name=McAfee Access Protection Log Reporter version=1378830547r3 type=policy
execute disconnected=false logged_off=true
execute events
Kbot Config Info - Finish
NetworkOps_UploadFile: Failed to upload file.
Answer Summary:
For McAfee logs you have to copy out the file to another location and upload the copy. Here is the batch code I used for the copy process. xcopy /h %ALLUSERSPROFILE%\McAfee\DesktopProtection\AccessProtectionLog.txt %ALLUSERSPROFILE%\Dell\KACE\thirdparty_logfiles\
Cancel
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

1

You need to copy the files to a separate location and then upload them to the kace appliance. That's how I was able to get the appliance to capture mcafee logs. I'm assume it's some sort of mcafee access protection that blocks the logs from being directly uploaded to the appliance.

Answered 09/10/2013 by: ms01ak
Tenth Degree Black Belt

  • See my post here http://www.itninja.com/blog/view/capture-mcafee-log-files-into-kace
Please log in to comment
Answer this question or Comment on this question for clarity
Admin Script Editor
Admin Script Editor is an integrated scripting environment available free here at ITNinja

Share