Configuring crash diagnostics settings in Kaspersky Security Center

If a problem occurs when operating Kaspersky Industrial CyberSecurity for Nodes (for example, the application crashes), you can diagnose it. To do this, you can enable the creation of trace files and a dump file for the Kaspersky Industrial CyberSecurity for Nodes process and send these files for analysis to Kaspersky Technical Support.

Kaspersky Industrial CyberSecurity for Nodes does not send any trace or dump files automatically. Diagnostic data can only be sent by a user who has the required permissions.

Kaspersky Industrial CyberSecurity for Nodes writes information to trace files and the dump file in unencrypted form. The folder where files are saved is selected by the user and managed by the operating system configuration and Kaspersky Industrial CyberSecurity for Nodes settings. You can configure access permissions and allow only required users to access logs, trace files and dump files.

To configure crash diagnostics settings in Kaspersky Security Center:

1. In the Kaspersky Security Center Administration Console, open the Application settings window.
2. Open the Malfunction diagnosis section.
3. If you want the application to write debug information to a file, select the Write debug information to trace file check box.
4. In the field below, specify the folder where Kaspersky Industrial CyberSecurity for Nodes will save trace files.
5. Configure the level of detail of debug information.
   

   This drop-down list lets you select the level of detail of debug information that Kaspersky Industrial CyberSecurity for Nodes saves to the trace file.

   You can select one of the following detail levels:

   • Critical events – Kaspersky Industrial CyberSecurity for Nodes saves information only about critical events to the trace file.
   • Errors – Kaspersky Industrial CyberSecurity for Nodes saves information about critical events and errors to the trace file.
   • Important events – Kaspersky Industrial CyberSecurity for Nodes saves information about critical events, errors, and important events to the trace file.
   • Informational events – Kaspersky Industrial CyberSecurity for Nodes saves information about critical events, errors, important events, and informational events to the trace file.
   • All debug information – Kaspersky Industrial CyberSecurity for Nodes saves all debug information to the trace file.

   A Technical Support representative determines the detail level that needs to be set in order to resolve any issue that may arise.

   The default level of detail is set to All debug information.

   The drop-down list is available if the Write debug information to trace file check box is selected.

6. Specify the maximum size of trace files.
7. Specify the maximum number of files for one trace log.

   Kaspersky Industrial CyberSecurity for Nodes will create up to the maximum number of trace files for each component to be debugged.

8. Specify the components to be debugged. Component codes must be separated with a semicolon. The codes are case sensitive (see table below).

   Kaspersky Industrial CyberSecurity for Nodes subsystem codes

   Component Code	Name of component
   *	All components.
   gui	User interface subsystem, Kaspersky Industrial CyberSecurity for Nodes snap-in in Microsoft Management Console.
   ak_conn	Subsystem for integrating Network Agent and Kaspersky Security Center.
   bl	Control process, implements Kaspersky Industrial CyberSecurity for Nodes control tasks.
   wp	Work process, handles anti-virus protection tasks.
   blgate	Kaspersky Industrial CyberSecurity for Nodes remote management process.
   ods	On-Demand Scan subsystem.
   oas	Real-Time File Protection subsystem.
   qb	Quarantine and Backup subsystem.
   scandll	Auxiliary module for virus scans.
   core	Subsystem for basic anti-virus functionality.
   avscan	Anti-virus processing subsystem.
   avserv	Subsystem for controlling the anti-virus kernel.
   prague	Subsystem for basic functionality.
   updater	Subsystem for updating databases and software modules.
   snmp	SNMP protocol support subsystem.
   perfcount	Performance counter subsystem.

   The trace settings of the Kaspersky Industrial CyberSecurity for Nodes snap-in (gui) and the Administration Plug-in for Kaspersky Security Center (ak_conn) are applied after these components are restarted. The trace settings of the SNMP protocol support subsystem (snmp) are applied after the SNMP service is restarted. The trace settings of the performance counter subsystem (perfcount) are applied after all processes that use performance counters are restarted. Trace settings for other Kaspersky Industrial CyberSecurity for Nodes subsystems are applied as soon as the crash diagnostics settings are saved.

   By default, Kaspersky Industrial CyberSecurity for Nodes logs debug information for all Kaspersky Industrial CyberSecurity for Nodes components.

   The entry field is available if the Write debug information to trace file check box is selected.

9. If you want the application to create a dump file, select the Create dump file check box.
10. In the field below, specify the folder in which Kaspersky Industrial CyberSecurity for Nodes will save the dump file.
11. Click OK.

The configured application settings are applied on the protected device.

Page top