KUMA logs

Services:

• Storage
• Correlators
• Collectors
• Agents

To enable it, use the Debug toggle switch in the settings of the service.

Storage location: the service installation directory. For example, /opt/kaspersky/kuma/<service name>/log/<service name>. You can download the service logs from the KUMA web interface, in the Resources → Active services section by selecting the desired service and clicking Log.

Logs residing on Linux machines can be viewed by running the journalctl and tail command. For example:

• Storage. To return the latest logs from the storage installed on the server, run the following command:

  journalctl -f -u kuma-storage-<storage ID>

• Correlators. To return the latest logs from correlators installed on the server, run the following command:

  journalctl -f -u kuma-correlator-<correlator ID>

• Collectors. To return the latest logs from a specific collector installed on the server, run the following command:

  journalctl -f -u kuma-collector-<collector ID>

• Agents. To return the latest logs from an agent installed on the server, run the following command:

  tail -f /opt/kaspersky/agent/<Agent ID>/log/agent

  The activity of Agents on Windows machines is always logged if they are assigned the logon as a service permission. Data is specified in more detail when the Debug check box is selected. Agent logs on Windows machines can be viewed in the file located at the path %PROGRAMDATA%\Kaspersky Lab\KUMA\<Agent ID>\agent.log. Logs of Agents on Linux machines are stored in the agent installation directory.

Resources:

• Connectors
• Destinations
• Enrichment rules

To enable it, use the Debug toggle switch in the settings of the service to which the resource is linked.

The logs are stored on the machine hosting the installed service that uses the relevant resource. Detailed data for resources can be viewed in the log of the service linked to a resource.