How to generate trace files in Kaspersky Endpoint Security for Windows using registry keys
Show applications and versions that this article concerns
- Kaspersky Endpoint Security 12.5 for Windows (version 12.5.0.539)
- Kaspersky Endpoint Security 12.4 for Windows (version 12.4.0.467)
- Kaspersky Endpoint Security 12.3 for Windows (version 12.3.0.493)
- Kaspersky Endpoint Security 12.2 for Windows (version 12.2.0.462)
- Kaspersky Endpoint Security 12.1 for Windows (version 12.1.0.506)
- Kaspersky Endpoint Security 12 for Windows (version 12.0.0.465)
- Kaspersky Endpoint Security 11.11 for Windows (version 11.11.0.452)
- Kaspersky Endpoint Security 11.10 for Windows (version 11.10.0.399)
- Kaspersky Endpoint Security 11.9 for Windows (version 11.9.0.351)
- Kaspersky Endpoint Security 11.8 for Windows (version 11.8.0.384)
- Kaspersky Endpoint Security 11.7 for Windows (version 11.7.0.669)
When creating a request to technical support, you should attach a trace file. Trace files are used by Technical Support for diagnostic purposes. They contain all steps of application commands execution written to the file and helps detect the step on which a problem occurs.
This article explains how to collect trace files using registry keys. For instructions on:
- How to create a trace file using graphical user interface, see Online Help.
- How to enable or disable tracing using the command line, see Online Help.
How to generate a trace file using registry keys
Run REG files in Safe Mode and reproduce the issue in regular mode.
To generate a trace file:
- Make sure your user account has administrator permissions.
- Download the KES_trace_on_off.zip archive and extract the files from it.
- Enable tracing. To do so, run the following file from the archive in safe mode:
- For 32-bit operating systems: Trace_ON_x32.reg
- For 64-bit operating systems: Trace_ON_x64.reg
- Reproduce the problem in normal mode.
- Disable tracing. To do so, run the following file from the archive in safe mode:
- For 32-bit operating systems: Trace_OFF_x32.reg
- For 64-bit operating systems: Trace_OFF_x64.reg
By default, trace files are saved to the hidden folder:
- For versions 11.0.0–11.4.0: %ProgramData%\Kaspersky Lab
- For versions 11.5.0–11.9.0: %ProgramData%\Kaspersky Lab\KES\Traces
- For versions 11.10.0 and above: %ProgramData%\Kaspersky Lab\KES.<The product line number>\Traces
To access the folder, enable display of hidden files and folders in the Windows operating system settings.
How to generate a trace file of required level using registry keys
Run REG files in Safe Mode and reproduce the issue in regular mode.
To create a trace file of the required level:
- Make sure your user account has administrator permissions.
- Download the KES_trace_level.zip archive and extract the files from it.
- Change the trace level and enable tracing. To do so, run the following file from the archive in safe mode:
- For 32-bit operating systems: Trace_ON_500_x32.reg, Trace_ON_700_x32.reg or Trace_ON_800_x32.reg
- For 64-bit operating systems: Trace_ON_500_x64.reg, Trace_ON_700_x64.reg or Trace_ON_800_x64.reg
- Reproduce the problem in normal mode.
- Disable tracing. To do so, run the following file from the archive in safe mode:
- For 32-bit operating systems: Trace_OFF_x32.reg
- For 64-bit operating systems: Trace_OFF_x64.reg
A trace file of the required level will be created. After following the step 5, the tracing level will be set to 500 by default.
How to change the target folder to save a trace file using registry keys
Run REG files in Safe Mode and reproduce the issue in regular mode.
To change the target folder to save the trace file, follow the guide below. The C:\trace\ folder is used as an example:
- Make sure your user account has administrator permissions.
- Create a trace folder on disk C.
- Download and unpack one of the following archives:
- KES12.1_trace_path.zip if you are using Kaspersky Endpoint Security version 12.1.0.
- KES11.11_trace_path.zip if you are using Kaspersky Endpoint Security version 11.11.0.
- KES11.10_trace_path.zip if you are using Kaspersky Endpoint Security version 11.10.0.
- KES11.5–11.9_trace_path.zip if you are using Kaspersky Endpoint Security versions 11.5.0–11.9.0.
- KES11.0–11.4_trace_path.zip if you are using Kaspersky Endpoint Security versions 11.0.1–11.4.0.
- Change the path to C:\trace. To do so, run the following file from the archive:
- For 32-bit operating systems: Custom_path_x32.reg
- For 64-bit operating systems: Custom_path_x64.reg
- Restart your computer.
The changes will be applied upon restart. Trace files will be automatically saved to the created folder.
To save the trace file to the default folder:
- %ProgramData%\Kaspersky Lab\KES.<The product line number>\Traces (for versions 11.10.0 and above), run the Default path_x32_KES11.5-11.10.reg or Default path_x64_KES11.5-11.10.reg file from the archive.
- %ProgramData%\Kaspersky Lab\KES\Traces (for versions 11.5.0–11.9.0), run the Default path_x32_KES11.5-11.10.reg or Default path_x64_KES11.5-11.10.reg file from the archive.
- %ProgramData%\Kaspersky Lab (for versions 11.0.0–11.4.0), run the Default path_x32.reg or Default path_x64.reg file from the archive.
