How to collect trace files for Kaspersky Security Center
Show applications and versions that this article concerns
- Kaspersky Security Center 15.1 (version 15.1.0.20748)
- Kaspersky Security Center 14.2 (version 14.2.0.26967)
- Kaspersky Security Center 14 (version 14.0.0.10902)
When creating a request to Kaspersky Technical Support, you may be asked to collect and attach trace files. They contain all steps of application command execution, which helps detect the step on which an error occurs.
You can collect trace files in one of the following ways:
- Using the .reg files
- Using the klactgui.exe tool
The tool allows you to collect trace files via the GUI, except for the Administration Console (MMC) traces.
How to collect trace files using .reg files
The .reg files in the table below limit the size of trace files to 10 GB and enable file rotation, except for the Administration Console (MMC) traces. When the rotation is enabled, trace files are divided into several parts. When the total size of trace files reaches 10 GB, the oldest file is deleted and a new file is created without exceeding the limit.
You can modify the .reg file to disable the size limit of trace files and change the folder where trace files are saved.
To collect trace files:
- Download a compatible zip file from the table below.
- Extract the files on the device where the issue occurs.
- Run the *_ON.reg file to start tracing.
- Reproduce the issue.
- Run the *_OFF.reg file to stop tracing.
- Send the collected trace file to Kaspersky Technical Support.
The created trace files will be located in the Administration Server installation folder:
%ProgramFiles(x86)%\Kaspersky Lab\Kaspersky Security Center.
| Components and tasks | .reg files
with tracing level 4 |
.reg files
with tracing level 5 |
Names and location
of trace files |
|---|---|---|---|
| Administration Server | trace_server-4.zip | trace-500-server.zip |
$klserver-1093.log |
| Network Agent | trace_nagent-4.zip | trace-500-nagent.zip |
$klnagent-1103.log The file is located in the Network Agent installation folder. |
| Task for downloading updates
to the repository of the Administration Server |
trace_nagent-4.zip | trace-500-nagent.zip |
$up2date-1103.log $up2date-1103-eka.log $up2date-1103.log.bak (if applicable) $up2date-1103-eka.log.bak (if applicable) The trace files are generated via the Administration Agent.
The trace files are located in the Administration Server installation folder. |
|
Task for downloading updates
|
trace_nagent-4.zip | trace-500-nagent.zip |
$up2date-1103.log $up2date-1103-eka.log $up2date-1103.log.bak (if applicable) $up2date-1103-eka.log.bak (if applicable) The trace files are generated via the Administration Agent
The trace files are located in the Network Agent installation folder. |
| Network Agent
installed on a cluster |
trace-4-agent-cluster.zip | - |
$klnagent_cluster-1103.log The file is located in the Administration Server installation folder on the node. |
| Administration Console (MMC) | trace_console-4.zip | trace-500-console.zip |
klakcon.txt After you enable or disable tracing, restart the Administration Console (MMC). |
| Kaspersky Security Center (on a cluster) | |||
| Microsoft Failover Cluster and its services | trace-4-server-microsoft-failover-cluster.zip | - | $klserver_cluster*.log
$klnagent_cluster*.log $klactprx_cluster*.log $klcsweb_cluster*.log |
| Kaspersky Failover Cluster and its services | trace-4-server-kaspersky-failover-cluster.zip | - | $klserver_klfoc*.log
$klnagent_klfoc*.log $klactprx_klfoc*.log $klfoc_klfoc*.log |
How to modify tracing settings in .reg files
You can modify tracing settings in .reg files. The settings are listed in the table below.
| Setting | Value | Example |
|---|---|---|
| TraceDir | Path to the folder where trace files are saved.
If the setting is not specified, the default path is %ProgramFiles(x86)%\Kaspersky Lab\Kaspersky Security Center. |
"TraceDir"="O:\Temp" |
| TraceLevel | Tracing level is specified in the format 0000000X, where X is the tracing level.
This setting is mandatory. To disable tracing, set the value to 00000000. |
"TraceLevel"=dword:00000004 |
| TraceMaxSizeMB | Limits the size of trace files and enables their rotation.
The file size must be specified in MB in a hexadecimal (HEX) notation. The maximum value is 00019000 (102400 MB). If this setting is not specified, the file size is not limited and rotation is disabled. |
"TraceMaxSizeMB"=dword:00002000 |
Example of a .reg file where we have specified the path to the folder for saving trace files, the trace level and the total file size limit of 10 GB:
"TraceDir"="O:\Temp"
"TraceLevel"=dword:00000004
"TraceMaxSizeMB"=dword:00002800
