Ask the Community
Groups
Using Kaseya Support gatherlogs utility - Connect IT Community | Kaseya
<main> <article class="userContent"> <p>Gatherlogs is a utility for collecting logs and other diagnostic data from a Windows machine: </p> <p>- all log files modified within specified time-frame (e.g. 24 hours)</p> <p>- msinfo32 report</p> <p>- Windows event logs</p> <p>- list of certificates from personal store</p> <p> </p> <p>It can be used on an agent or VSA server.</p> <p> </p> <p><strong>Usage instructions:</strong> </p> <p> </p> <p><strong>Agent Procedure method</strong></p> <p>1) download procedure from <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fs3-eu-west-1.amazonaws.com%2Fgatherlogs%2FProcedure%2BgatherLogs.zip" rel="nofollow noopener noreferrer">here</a> (use "save link as" to download zip file)</p> <p>2) go to Agent Procedures > Managed Procedures > Schedule/Create</p> <p>- select a folder</p> <p>- click on Import Folder/Procedure button and select the XML file from the zip downloaded in step 1</p> <p>3) run the procedure on the target agent using the "Run Now" button in the Schedule area</p> <p>- when prompted, submit number of hours of logs to capture (any log files updated in this time-frame will be included in the archive). Please ensure the time-frame includes the last time the error condition occurred, or as requested by support technician.</p> <p>4) on completion, agent procedure log should show this: - </p> <p><em>Archive is ready for download from Agent Procedures > File Transfer > Get File (kaseyalogs-agent.group.org.7z). Encryption password is "57370686"</em></p> <p>(password is randomised)</p> <p>5) go to Agent Procedures > File Transfer > Get File area, download the file and provide it to Kaseya support along with the encryption password</p> <p> </p> <p><strong>Manual method</strong></p> <p>(if target machine does not have online agent)</p> <p>1) download utility from <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fs3-eu-west-1.amazonaws.com%2Fgatherlogs%2FgatherLogs.zip" rel="nofollow noopener noreferrer">here</a></p> <p>2) copy the 2 files from the zip to a folder on target machine (e.g. c:\kworking)</p> <p>3) run command shell (cmd.exe) as administrator and execute utility this way: - </p> <pre class="code codeBlock" spellcheck="false" tabindex="0">c:\kworking\gatherlogs.exe -z c:\kworking -t 24 -p password</pre> <p> -z = folder to create the log archive in (if not specified, the file will be created in c:\)</p> <p>-t = threshold hours (in above example, log files modified in last 24 hours will be included). Please ensure the time-frame includes the last time the error condition occurred, or as requested by support technician.</p> <p>-p = encryption password for the archive</p> <p>4) file kaseyalogs.7z will be created in the specified folder. Please provide this to Kaseya Support along with the encryption password.</p> <p> </p> <p><strong>Exclusions</strong></p> <p>To exclude specific files folders or drives from log collection, copy the <em>exclusions.txt</em> file from the archive (download link above) to the same folder you are running the executable from. Add exclusions, one per line, as per these examples: -</p> <table style="width: 648px;"><tbody><tr><td><em>Exclude a specific file</em></td> <td>c:\windows\comsetup.log</td> </tr><tr><td><em>Exclude a folder</em></td> <td>c:\my application\logs</td> </tr><tr><td><em>Exclude a drive</em></td> <td>z:\</td> </tr></tbody></table> </article> </main>