Having a Workspace ONE UEM deployment allows you to have many integrated services and the required core services. You may have issues with some of these services and require assistance troubleshooting your error. Learn more about how Workspace ONE UEM provides log information for your integrated services to help fix your issues.
Explore and implement logging for services that you have integrated into your Workspace ONE UEM deployment. All Logs are located in the /AirWatch/Logs folder unless otherwise specified.
AirWatch Cloud Connector (ACC)
Learn more about the Workspace ONE UEM logging functions available for the AirWatch Cloud Connector (ACC). All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| CloudConnector | CloudConnector.log | Contains information about ACC Services such as directory authentication, group syncs, communication with CA/PKI, PowerShell, syslog, and additional ACC services. |
Change the Logging Level for ACC
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- Access the CloudConnector.exe.config file contained in the /Airwatch/CloudConnector/Bank# folder.
- Compare the two bank folders to ensure you are editing the one with the most recent modified dates.
- Change the level from information to verbose in the line <loggingConfiguration> line.
- Allow the services a few minutes to pick up the logging change.
Secure Email Gateway v2 (SEGv2)
Learn more about the Workspace ONE UEM logging functions available for Secure Email Gateway v2 (SEGv2). All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| SecureEmailGateway /var/log/airwatch/docker/seg/ | app.log | Contains information on device transactions and an analysis of each request passed through SEG and SEG application logs. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | http-transaction.log | Contains information on overview of each email request passed through SEG (Transaction summary). |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | policy-update.log | Contains information on the policy updates performed by SEG. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | active-sync-payload-reporting.log | Contains information active sync transaction reported to Email List view in console. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | non-compliant-devices.log | Contains information on transactions for devices blocked by SEG and reasons for blocking. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | cert-auth.log | Contains information of certificate authentication requests and certificate validation. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | cache.log | Contains information about SEG policy cache. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | content-transform.log | Contains information about content transformation (attachment and hyperlink transformation) processing. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | ews-proxy.log | Contains information about ews requests and proxy to ews endpoint. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | ews-transaction.log | Contains information on overview of ews transactions through SEG (Transaction summary). |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | resources-usage.log | Contains information about CPU and memory usage. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | system-cpu-load.log | Contains CPU usage if it is exceeding the defined threshold for a given sustained period. |
| SecureEmailGateway /var/log/airwatch/docker/seg/ | thread-dump.log | Contains information about thread dump. |
| SecureEmailGateway\kerberos /var/log/airwatch/docker/seg/ | kerberos-service-manager.log | Contains information about Kerberos pipes availability. |
| SecureEmailGateway\kerberos /var/log/airwatch/docker/seg/ | AirwatchKerberosClientPipe-#.log (# is pipe number) | Kerberos token retrieval requests. |
Change the Logging for SEGv2
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- Access the Admin page at https://localhost:44444/seg/admin.
- On the Logging tab, change the logging level from Error to Debug.
- Wait a few minutes for the service to pick up the logging change.
Email Notification Service
Learn more about the Workspace ONE UEM logging functions available for Email Notification Service. All Logs are located in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| AW.Mail.Notification.Service.log | Contains information on ENS communication such as log subscriptions to the email server, transactions with API servers, notification status for user/device, and communications to CNS. |
Change the Logging Level for the Email Notification Service
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- Access the AW.Mail.Notification.Service.Config file contained in the Installation folder.
- Change the level from Error to Verbose in the application configuration.
- Wait a few minutes for the service to pick up the logging change.
Email Notification Service v2
Learn more about the Workspace ONE UEM logging functions available for Email Notfication Service v2. All logs are located in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| ENS.log | ENS web application logging. | |
| ReSubscriptionMechanism.log | Logs for the subscription service that runs monitoring user’s subscriptions and sending out notifications to have clients re-register. | |
| RSAKeysTracker.log | Logs for service that monitors the key repository in the DB and triggers creations of additional keys when necessary. | |
| /tools/uploadrsakeys/ | UploadRSAKeys.log | Contains information on the RSA Keys. |
| /database/ | AWDatabaseLog_MMDDYY.txt | Contains ENSv2 database transactions. |
| /%Installdir%/ | Airwatch_ENS_V2_InstallLog.txt | Contains information related to installation process for ENSv2. |
Change the Logging Level for the Email Notification Service
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- Access the AW.Mail.Notification.Service.Config file contained in the Installation folder.
- Change the level from Error to Verbose in the application configuration.
- Wait a few minutes for the service to pick up the logging change.
Workspace ONE Tunnel
Learn more about the Workspace ONE UEM logging functions available for Workspace ONE Tunnel. All logs are in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| Workspace ONE Tunnel Proxy | AirWatchDiagnosticService.log | Contains information on Tunnel diagnostic sample processing and saving. |
| Workspace ONE Tunnel Proxy /var/log/airwatch/proxy/ | proxy.log (Relay) | Contains information on Tunnel Proxy such as allowed devices entries, authentication, and certificate status from requesting device to AWCM. |
| Workspace ONE Tunnel Proxy | proxy.log (Endpoint) | Contains information on web requests through the proxy and to the listening endpoint. |
| Workspace ONE Tunnel Proxy /var/log/airwatch/proxy/ | proxy-request.log | Contains HTTP request information for requests going through the proxy. |
| Workspace ONE Tunnel Proxy /var/log/airwatch/proxy/ | proxy-request.log | HTTP request information for requests going through the proxy. |
| /var/log/airwatch/tunnel/vpnd/ | tunnel.log | Contains information on VPN communications such as allowing devices, communication with API/AWCM, and health check status. |
| /var/log/airwatch/tunnel/vpnd/ | tunnel_init.log | Contains information on Tunnel configuration and initialization. |
| /var/log/airwatch/tunnel/vpnd/ | reporter.log | Information about the test connection feature. |
| /var/log/airwatch/tunnel/vpnd/ | reporter_install.log | Information on the installation of vpnreportd service. |
Change the Logging Level for Workspace ONE Tunnel
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- To change the logging levels for Workspace ONE Tunnel, in the console, navigate to Groups & Settings > All Settings > System > Enterprise Integration > Workspace ONE Tunnel > Configuration > Advanced.
Content Gateway
Learn more about the Workspace ONE UEM logging functions available for Content Gateway. All logs are located in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| ContentGateway /var/log/airwatch/content-gateway/ | CGContent.log (Relay) | Contains information on Content Gateway access such as authentication, trust relationship establishment, and repository structure services. |
| ContentGateway /var/log/airwatch/content-gateway/ | CGContent.log (Endpoint) | Contains information on repository folder actions and user impersonation. |
| ContentGateway /var/log/airwatch/content-gateway/ | Content-gateway-wrapper.log | Information about Content Gateway-related process lifecycle. |
| ContentGateway /var/log/airwatch/content-gateway/ | content-gateway.log, 0.content-gateway-YYYY-mm.dd.log.zip | Contains log messages from Content Gateway. |
| ContentGateway /var/log/airwatch/content-gateway/ | tunnel.log | Contains log messages from the tunnel process that is used as part of the XML API processing. You must have Tunnel enabled in the Horizon settings in order see this log. |
| ContentGateway /var/log/airwatch/content-gateway/ | tunnel-snap.tar.gz | Tarball containing Workspace ONE Tunnel server and proxy logs. |
| ContentGateway /var/log/airwatch/content-gateway/ | config.yml | Contains Content Gateway configuration and log level details. |
| ContentGateway /var/log/airwatch/content-gateway/ | smb.conf | Contains SMB client configuration. |
Change the Logging Level for the Content Gateway
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more, or less information.
- Access the logback.xml file contained in the Content Gateway Config folder /opt/airwatch/content-gateway/conf.
- Change the level to debug in the <logger name="com.airwatch" level="info" /> line.
- Wait a few minutes for the service to pick up the logging change.
Unified Access Gateway (System Information)
Use this information for UAG-based services using the Log Archive download option under the UAG Admin UI Support Settings page. Learn more about the Workspace ONE UEM logging functions available for Unified Access Gateway (System Information). All Logs are located in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| /Opt/AirWatch/Gateway/Logs | *.ZIP | Collection of log files on the UAG appliance. |
| /Opt/AirWatch/Gateway/Logs | rpm-version.log | Contains system info versioning for UAG appliance. |
| /Opt/AirWatch/Gateway/Logs | ipv4-forwardrules.log | Contains IPv4 forwarding rules on the appliance. |
| /Opt/AirWatch/Gateway/Logs | df.log | Contains information about disk space usage on the appliance. |
| /Opt/AirWatch/Gateway/Logs | netstat.log | Contains information on open ports and existing TCP connections. |
| /Opt/AirWatch/Gateway/Logs | netstat-s.log | Contains network statistics from the time of creation of the appliance. |
| /Opt/AirWatch/Gateway/Logs | netstat-r.log | Contains static routes created on the appliance. |
| /Opt/AirWatch/Gateway/Logs | uag_config.json,uag_config.ini | Contains the configuration of the UAG appliance. |
| /Opt/AirWatch/Gateway/Logs | ps.log | Contains process running at the time of downloading logs. |
| /Opt/AirWatch/Gateway/Logs | ifconfig.log | Contains information on the network interface configuration for the appliance. |
| /Opt/AirWatch/Gateway/Logs | free.log | Contains the amount of free RAM at the time of log gathering. |
| /Opt/AirWatch/Gateway/Logs | top.log | Contains a list of processes sorted by memory usage at the time of log gathering. |
| /Opt/AirWatch/Gateway/Logs | iptables.log | Contains IPv4 IP tables. |
| /Opt/AirWatch/Gateway/Logs | ip6tables.log | Contains IPv6 IP tables. |
| /Opt/AirWatch/Gateway/Logs | w.log | Contains information about up time and users currently on the machine. |
| /Opt/AirWatch/Gateway/Logs | systemctl.log | Contains a list of services running in the appliance. |
| /Opt/AirWatch/Gateway/Logs | resolv.conf | Contains info on the local clients connections to known DNS servers. |
| /Opt/AirWatch/Gateway/Logs | hastats.csv | Contains stats per node and total stats information for each back end type (Edge Service Manager, Workspace ONE Tunnel, Content Gateway). |
Unified Access Gateway
Use this information for UAG based services using the Log Archive download option under the UAG Admin UI Support Settings page. Learn more about the Workspace ONE UEM logging functions available for Unified Access Gateway. All Logs are located in the file paths cited below.
| Folder | Log Name | Description |
|---|---|---|
| /Opt/AirWatch/Gateway/Logs | supervisord.log | Contains information on the Supervisor which manages the edge service manager, admin, and AuthBroker). |
| /Opt/AirWatch/Gateway/Logs | esmanager-x.log | Contains information on the Edge service manager which shows back end processes performed on the appliance. |
| /Opt/AirWatch/Gateway/Logs | esmanager-std-out.log | Contains information on the Edge service manager which shows back end processes performed on the appliance. |
| /Opt/AirWatch/Gateway/Logs | audit.log | Contains audits for all admin user operations. |
| /Opt/AirWatch/Gateway/Logs | authbroker.log | Contains information from the AuthBroker process, which handles Radius and RSA SecurID authentication. |
| /Opt/AirWatch/Gateway/Logs | admin.log | |
| /Opt/AirWatch/Gateway/Logs | admin-std-out.log | Contains information on the admin GUI logs and messages from the process that provides REST API. |
| /Opt/AirWatch/Gateway/Logs | bsg.log | Contains information from the Blast Secure Gateway. |
| /Opt/AirWatch/Gateway/Logs | SecurityGateway_xxx.log | Contains information from the PCoIP Secure Gateway. |
| /Opt/AirWatch/Gateway/Logs | utserver.log | Contains information from the UDP Tunnel server. |
| /Opt/AirWatch/Gateway/Logs | activeSessions.csv | Contains a list of active Horizon and WRP sessions. |
| /Opt/AirWatch/Gateway/Logs | haproxy.conf | Contains information on the HA proxy configuration parameters for TLS port sharing. |
| /Opt/AirWatch/Gateway/Logs | vami.log | Contains information from running vami commands to set network interface configurations during deployment. |
| /Opt/AirWatch/Gateway/Logs | content-gateway.log, content-gateway-wrapper.log, 0.content-gateway-YYYY-mm.dd.log.zip | Contains log messages from Content Gateway. |
| /Opt/AirWatch/Gateway/Logs | tunnel-snap.tar.gz | Tarball containing Workspace ONE Tunnel server and proxy logs. |
| /Opt/AirWatch/Gateway/Logs | admin-zookeeper.log | Contains information on the data layer that is used to store the UAG configuration. |
| /Opt/AirWatch/Gateway/Logs | aw-appliance-agent.log | Contains information on the Appliance agent which is responsible for starting AirWatch services. |
| /Opt/AirWatch/Content-Gateway/conf/ | config.yml | Contains Content Gateway configuration and log level details. |
| /Opt/AirWatch/Content-Gateway/smb-connector/ | smb.conf | Contains SMB client configuration. |
| /Opt/AirWatch/Content-Gateway/smb-connector/ | smb-connector | Contain SMB protocol and log level details. |
Change the Logging Level for the Unified Access Gateway Service
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
-
In the Unified Access Gateway Admin UI, navigate to Support Settings > Log Level Settings > .
-
Select INFO, ERROR, WARNING, or DEBUG based on your requirements.
-
Wait a few minutes for the service to pick up the logging change.
Level Type of Information Collected INFO Information messages that highlight the progress of the service. ERROR Error events that might still allow the service to continue running. WARNING Potentially harmful situations but are usually recoverable or can be ignored. DEBUG Events that would generally be useful to debug problems. You can enable the debug mode to view or manipulate the internal state of the appliance. The debug mode lets you test the deployment scenario in your environment. -
Restart each service after saving changes.
Legacy Remote File Storage
Learn more about the Workspace ONE UEM logging functions available for Remote File Storage. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| RemoteFileStorage | Rfs-web.log | Contains information on RFS such as certificates, tokens, files, and storage file paths. |
Legacy Content Rendering Engine
Learn more about the Workspace ONE UEM logging functions available for Content Rendering Engine. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /var/log/airwatch/cre/ | Cre.log | Contains information on CRE such as Hazelcast, render requests, and associated manifests. |
Change the Logging Level for the Content Rendering Engine
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- Access the logback.xml file contained in the CRE Configuration Folder.
- Edit the file on using the Linux vi editor or on WinSCP.
- Write text in the logback.xml file.
- Enter
ito begin writing text. - Change the logging level XML attribute value in both the logger and root XML elements.
- Select Esc to exit edit.
- Press
wq!to write and quit.
- Enter
Change the Logging Level for the Content Rendering Engine
Legacy Advanced Remote Management
Learn more about the Workspace ONE UEM logging functions available for Advanced Remote Management. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| Program Files/RemoteManagement/Logs | *.log | Contains information on Remote Management communications including that of Registry Editor. |
Change the Logging Level for Advanced Remote Management
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more or less information.
- To change the logging level for the Remote Management Service on the device, change the apListener.application.config, FileManager.application.config and RemoteControl.application.config in the Config folder to 'DEBUG'.
Workspace ONE Assist
Learn more about the Workspace ONE UEM logging functions available for Workspace ONE Assist. All Workspace ONE Assist server logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| C:/Program Files/AirWatch/WorkspaceONEAssist/AetherpalToolController/logs/ | AetherpalToolHandler_<SessionID>.txt | Corresponding log related to console side events for the same Connection Proctor event. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/AetherpalToolController/logs/ | Bootlog_AetherpalToolHandler.txt | Contains information whenever a session is invoked from the console. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/SessionLogs | syslog_aphandler_stcp<ARMURL>#ID=<SessionID>.txt | Contains information on each remote session launched with Workspace ONE Assist. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/ | bootlog_aphandler.txt | Contains starting parameters of Workspace ONE Assist Connection Proctor service. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/ | Syslog_aphandler.txt | Contains heartbeat checks for Workspace ONE Assist Connection Proctor servers. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/ | Bootlog_ConnectorProctorService.txt | Contains starting parameters of Workspace ONE Assist Connection Proctor service. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/ | Syslog_ConnectionProctorService.txt | Contains information on Workspace ONE Assist service level events. Examples are last service start times and successful connections. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ConnectionProctor/logs/ | Bootlog_ConnectionProcotrService.txt | Contains information on Workspace ONE Assist service level events. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/logs/Anchor/ | anchor-service.txt | Contains information on Workspace ONE Assist server and client transaction. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/logs/Admin/ T10 | T10-service.txt | Contains information on Workspace ONE Assist and Workspace ONE UEM device validation. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ManagementEntity/logs | Bootlog_MgmtEntityService.txt | Contains starting parameters of Workspace ONE Assist Management Entity service. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ManagementEntity/logs | Syslog_MgmtEntityService.txt | Contains information on Connection Proctor Service Checkins and available nodes. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/DataTierProxy/logs | Bootlog_DataTierProxyService.txt | Contains starting parameters of Workspace ONE Assist DataTier Proxy service. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/DataTierProxy/logs | Syslog_DataTierProxyService.txt | Contains information If other proxy status of dependent Workspace ONE Assist services. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/DataTierProxy/logs | dtp-service.txt | Contains information on service configurations and data source information. |
| C:/Program Files/AirWatch/WorkspaceONEAssist/ServiceCoordinator/logs | Bootlog_ServiceCoordinatorService.txt | Contains starting parameters of Workspace ONE Assist Service Coordinator service and successful database connection. |
Change the Logging Level for Workspace ONE Assist
- Logging level updates are generally not required for Workspace ONE Assisst - Error messaging generally has enough information to fully identify issues.
- For additional assistance with verbose logging, contact Workspace ONE Support.
Workspace ONE Access Service
Learn more about the Workspace ONE UEM logging functions available for Worksapce ONE Access Service. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /…/opt/airwatch/horizon/workspace/logs | Accessontrol-service.log | Access control service logging which handles role based access control for Workspace ONE Access admins. |
| /…/opt/airwatch/horizon/workspace/logs | Admin-Tool.log | Contains outputs from scripts called as admin tools. |
| /…/opt/airwatch/horizon/workspace/logs | Analytics-service.log | Log for analytics service that managed audit events, reports, and search functionality. |
| /…/opt/airwatch/horizon/workspace/logs | audit-service.log | Contains information on services and servlets including the API and elastic search functionalities. |
| /…/opt/airwatch/horizon/workspace/logs | Calculator-deadletters.log | Contains information on anything that was not calculated. |
| /…/opt/airwatch/horizon/workspace/logs | Calc-v2.log | Contains information on when the calculators were run. Calculators are responsible for completing entitlements of users/groups to app in the background. |
| /…/opt/airwatch/horizon/workspace/logs | Catalina.log | Contains information on the Tomcat service. Date indicated roll-over. |
| /…/opt/airwatch/horizon/workspace/logs | Cert-proxy.log | Contains certificate proxy information used by Android Mobile SSO. Date indicates roll-over. |
| /…/opt/airwatch/horizon/workspace/logs | Certproxy-catalina.log | Stderr /stdout for cert proxy process. |
| /…/opt/airwatch/horizon/workspace/logs | Certproxy-service.YYYY-MM-DD.log | Apache commons daemon wrapper logs for starting cert-proxy (date appended). |
| /…/opt/airwatch/horizon/workspace/logs | Configurator.log | Contains information related to the configurator admin UI that runs on port 8443. |
| /…/opt/airwatch/horizon/workspace/logs | Connector.log | Contains information related to the Workspace ONE Access Connector. Only available for 3.3.x+. |
| /…/opt/airwatch/horizon/workspace/logs | Connector-sync.log | Connector synchronization logs. Only available for 3.3.x+ |
| /…/opt/airwatch/horizon/workspace/logs | Db-sql-and-tx.log | SQL and transaction database logs for IDM. |
| /…/opt/airwatch/horizon/workspace/logs | Entitlement-calc-logic.log | Contains information on an additional background calculator specifically the entitlement calculations. |
| /…/opt/airwatch/horizon/workspace/logs | Entitlement-calc-stats.log | Contains information on an additional background calculator specifically the entitlement calculations. |
| /…/opt/airwatch/horizon/workspace/logs | Greenbox_web.log | Contains information of all user interface interactions for web and mobile. |
| /…/opt/airwatch/horizon/workspace/logs | Group-calc-logic.log | Contains information on an additional background calculator specifically the group entitlement calculations. |
| /…/opt/airwatch/horizon/workspace/logs | Group-calc-stats.log | Contains information on an additional background calculator specifically the group entitlement calculations. |
| /…/opt/airwatch/horizon/workspace/logs | Horizon.log | Workspace ONE Access service log which includes Identity Adapters, RabbitMQ, Elasticsearch, Ehcache, and other subsystems |
| /…/opt/airwatch/horizon/workspace/logs | Horizon-ceip.log | Contains information related to horizon and the device communications back to the service. |
| /…/opt/airwatch/horizon/workspace/logs | Horizon-persist.log | Contains information on the DB Schema. |
| /…/opt/airwatch/horizon/workspace/logs | Horizon-sockjs.log | Contains information of web socket communications between service and connector. |
| /…/opt/airwatch/horizon/workspace/logs | Host-manager.log | Contains information on the Tomcat service. Date indicates roll-over. This log is not utilized in the latest release. |
| /…/opt/airwatch/horizon/workspace/logs | Idm-service.YYYY-MM-DD.log | Apache commons daemon wrapper logs for starting IDM (date appended). |
| /…/opt/airwatch/horizon/workspace/logs | Localhost.log | Contains information on the Spring framework. Date indicates roll-over. |
| /…/opt/airwatch/horizon/workspace/logs | mtkadmin.log | Contains information related to Kerberos adapter. |
| /…/opt/airwatch/horizon/workspace/logs | Manager.log | Contains information on the Tomcat service. Date indicates roll-over. This log is not utilized in the latest release. |
| /…/opt/airwatch/horizon/workspace/logs | Tcruntime-instance.log | Contains information on the Tomcat service. Date indicates roll-over. This log is not utilized in the latest release. |
| /…/opt/airwatch/horizon/workspace/logs | tomcat.pid | Contains the PID for Tomcat. |
| /…/opt/airwatch/horizon/workspace/logs | airwatchcertproxy-stderr.log | Contains information on the certificate proxy component. This log is not utilized in the latest release. |
| /…/opt/airwatch/horizon/workspace/logs | Workspace.log | Contains information related to the service including startup errors. |
| /…/opt/airwatch/horizon/workspace/logs | Wrapper.log | Contains information on the Tomcat Wrapper service. This log is not utilized in the latest release. |
| /…/opt/airwatch/horizon/workspace/logs | Wsadmin.log | Contains information on the admin servlet. |
| /…/opt/airwatch/horizon/workspace/logs | connector-dir-sync.log | Contains information related to directory sync activities. (Embedded Connector) |
Workspace ONE Access Connector
Learn more about the Workspace ONE UEM logging functions available for Worksapce ONE Access Connector. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /AirWatch/IDMConnector/ | Idm-connector-installer.log | Contains information on install history and status of the Workspace ONE Access Connector Service. Applicable to version 19.03.01. |
| /Opt/…/Workspace/Logs | Configurator.log | Contains information on the configurator admin UI that runs on port 8443. Applicable to version 19.03.01. |
| /Opt/…/Workspace/Logs | Connector.log | Contains information related to the Workspace ONE Access Connector. Applicable to version 19.03.01. |
| /Opt/…/Workspace/Logs | Workspace.log | Contains information on service such as startup errors. Applicable to version 19.03.01. |
| /Opt/…/Workspace/Logs | Catalina.log | Contains information on the Tomcat service. Date indicates roll-over. Applicable to version 19.03.01. |
| /Opt/…/Workspace/Logs | Localhost.log | Contains information on the Spring framework. Date indicates roll-over. Applicable to version 19.03.01. |
| \opt\airwatch\horizon\workspace\logs\ | connector-dir-sync.log | Contains information related to directory sync activities. Applicable to version 19.03.01. |
| /User Auth Service/logs/ | eas-service.log | Information about the activity on the Enterprise services, such as directory sync and logins. |
| /Directory Sync Service/logs/ | eds-service.log | Information about the activity on the Enterprise services, such as directory sync and logins. |
| /Kerberos Auth Service/logs/ | eks-service.log | Information about the activity on the Enterprise services, such as directory sync and logins. |
| /User Auth Service/logs/ | eas-vertx-access.log | Information about the API requests on the Enterprise services. |
| /Directory Sync Service/logs/ | eds-vertx-access.log | Information about the API requests on the Enterprise services. |
| /Kerberos Auth Service/logs/ | eks-vertx-access.log | Information about the API requests on the Enterprise services. |
| /User Auth Service/logs/ | UserAuthService.out.log | Information about the process running the Enterprise services. |
| /Directory Sync Service/logs/DirectorySyncService | DirectorySyncService.out.log | Information about the process running the Enterprise services. |
| /Kerberos Auth Service/logs/ | KerberosAuthService.out.log | Information about the process running the Enterprise services. |
| /User Auth Service/logs/ | UserAuthService.err.log | Error information about the process running the Enterprise services. |
| /Directory Sync Service/logs/ | DirectorySyncService.err.log | Error information about the process running the Enterprise services. |
| /Kerberos Auth Service/logs/ | KerberosAuthService.err.log | Error information about the process running the Enterprise services. |
| /User Auth Service/logs/UserAuthService | UserAuthService.wrapper.log | Information about the process running the Enterprise services such as Java options and process ID. |
| /Directory Sync Service/logs/ | DirectorySyncService.wrapper.log | Information about the process running the Enterprise services such as Java options and process ID. |
| /Kerberos Auth Service/logs/ | KerberosAuthService.wrapper.log | Information about the process running the Enterprise services such as Java options and process ID. |
Change the Logging Level for the Workspace ONE Connector - 20.01+
To turn on DEBUG mode, follow these steps:
- Log in to the connector server.
- Edit the log4j2-override.xml file for the service you are troubleshooting.
- To adjust the log level for the Directory Sync service, edit the INSTALL_DIR\Workspace ONE Access\Directory Sync Service\conf\log4j2-override.xml file.
- To adjust the log level for the User Auth service, edit the INSTALL_DIR\Workspace ONE Access\User Auth Service\conf\log4j2-override.xml file.
- To adjust the log level for the Kerberos Auth service, edit the INSTALL_DIR\Workspace ONE Access\Kerberos Auth Service\conf\log4j2-override.xml file.
- To adjust the log level for the Virtual App service, edit the INSTALL_DIR\Workspace ONE Access\Virtual App Service\conf\log4j2-override.xml file.
- Only applicable to 21.08+
- In the following lines, change INFO to DEBUG and save the file:
-
Change the Logging Level for the Workspace ONE Connector - Legacy
One of the functions available for Workspace ONE UEM integrated services is to change the log level to get more, or less information. Applicable to version 19.03.01.
- Access the l hc-log4j.properties file contained in /usr/local/horizon/conf/ .
- Add “log4j.rootLogger=DEBUG,rollingFile,SYSLOG” to the first line of the file.
- Wait a few minutes for the service to pick up the logging change.
Workspace One Intelligence
Learn more about the Workspace ONE UEM logging functions available for Worksapce ONE Intelligence. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /Airwatch/ETLService/Logs | Etl.log (YYYY-MM-DD) | Contains log information for WorkSpaceONE Intelligence Connector (ETL). Contains health status information and information around successful/failure events. |
Memcached
Learn more about the Workspace ONE UEM logging functions available for Memchached. All Logs are located in the <installdrive>:/AirWatch/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /var/log/memcached-monitor/ | Memcached-{mm-dd-yyyy} | Logs useful statistics about the Memcached solution. |
Dell Factory Provisioning Service
Learn more about the Workspace ONE UEM logging functions available for the optional Factory Provisioning component. All Logs are located in the <installdrive>:/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /Airwatch/Logs | FactoryProvisioning.Service.log | This file has any diagnostics (info, warnings, errors) messages generated during the runtime of the Factory Provisioning Windows Service which is the service performing the PPKG packages generation requested by admins. |
| /AirWatch/Factory Provisioning Services/Website/ | AirWatch.WS1.FactoryProvisioning.API.log | This file has any diagnostics (info, warnings, errors) messages generated during the runtime of the Factory Provisioning Windows API which is the service accepting the PPKG packages generation requests by admins through different front-end components like the AW Console. |
| \AirWatch\Factory Provisioning Service\Services\ | AirWatch.WS1.FactoryProvisioning.Service.exe.config | Configuration file |
Airlift
Learn more about the Workspace ONE UEM logging functions available for the optional Airlift component. All Logs are located in the <installdrive>:/Logs folder unless otherwise specified.
| Folder | Log Name | Description |
|---|---|---|
| /Program Files/ AirWatch/ AirWatch Airlift/Logs/ | Airlift-YYYMMDD.log | Contains all AirLift information on calls made to the API endpoint of Workspace ONE UEM and Microsoft ConfigManager. |
Was this page helpful?