Manually enabling logging

This section describes how to enable logging manually.

For information on how to use Kaspersky Scan Engine GUI to enable logging, see section "Logging settings".

You can separately enable logging for Kaspersky Anti-Virus Engine

Note that logging significantly reduces Kaspersky Scan Engine performance. You are advised to use logging only for debugging purposes.

Enabling logging for Kaspersky Anti-Virus Engine

By default, Kaspersky Scan Engine does not log KAV Engine events.

To enable logging in Kaspersky Anti-Virus Engine:

1. Create a file named kave.ini in the ppl subdirectory of the installation directory.
2. Add the following lines to kave.ini:

   [LOGGING] WriteLog=9

3. Specify other parameters, if they are needed.
4. Save and close kave.ini.
5. Restart the Kaspersky Scan Engine service:
   • In HTTP mode, restart the kavhttpd service.
   • In ICAP mode, restart the kavicapd service.

Enabling logging in HTTP mode

By default, logging in HTTP mode is disabled. Kaspersky Scan Engine checks for the httpdkavlog.ini logging configuration file when the kavhttpd service starts. If this file exists, Kaspersky Scan Engine reads parameters from it.

To enable logging for the kavhttpd service:

1. Create a file named httpdkavlog.ini in the directory where the kavhttpd binary file is located.
2. Change the value of the <LogLevel> element to 1.
3. Specify the rest of the parameters, if needed.
4. Save and close httpdkavlog.ini.
5. Restart the kavhttpd service.

Enabling logging in ICAP mode

By default, logging in ICAP mode is disabled. Kaspersky Scan Engine checks the icapdkavlog.conf logging configuration file when the kavicapd service starts.

To enable logging for the kavicapd service:

1. Open the icapdkavlog.conf logging configuration file.
2. Specify debug or dbg in the <Level> element.
3. Specify other parameters, if they are needed.
4. Save and close icapdkavlog.conf.
5. Restart the kavicapd service.

Enabling logging in Kaspersky Scan Engine GUI

To enable logging in Kaspersky Scan Engine GUI:

1. Enable logging in the configuration file that corresponds to the selected Kaspersky Scan Engine mode (HTTP or ICAP).
   • If HTTP mode is used, enable logging in the httpdkavlog.ini logging configuration file.
   • If ICAP mode is used, enable logging in the icapdkavlog.conf logging configuration file.
2. In Kaspersky Scan Engine UI, go to Settings → Logging and enable logging.

   You can enable or disable logging in Kaspersky Scan Engine UI without restarting the kavicapd or kavhttpd service.

Page top