Enabling and disabling tracing by using the registry

You can enable and disable tracing by using the Microsoft Windows registry.

Before editing the Windows registry, it is recommended that you back up the registry.

To enable or disable tracing:

1. Click the Start button.
2. In the Start menu, either in the Run box or the Search box, type regedit, and then press Enter.

   The Registry Editor window opens.

   If you have restricted access to the Windows computer you are logged into, you might not be able to access the registry.

3. In the Registry Editor window, navigate to the Kaspersky Security Integration with SIEM registry key. It is available by one of the following paths:
   • HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Kaspersky Security Integration with SIEM
   • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Kaspersky Security Integration with SIEM

     If the registry key is not displayed, either run Kaspersky Security Integration with SIEM as administrator (by right-clicking the application icon and selecting Run as administrator) or create the registry key manually.

4. Edit the value of the EnableTraces parameter as follows:
   • 1—To enable tracing.
   • 0—To disable tracing.
5. Click OK in the Edit window, to save your changes.
6. Close the Registry Editor window.
7. If Kaspersky Security Integration with SIEM is open, close it, and then run it again as administrator (by right-clicking the application icon and selecting Run as administrator).

The trace files are saved to the IntegrationUI_SIEM.log file in the application installation folder. The default path is %PROGRAMFILES(x86)%\Kaspersky Lab\Kaspersky Security Integration with SIEM.

When you uninstall Kaspersky Security Integration with SIEM, the trace files are removed together with the application.

Page top