Application operation tracing

Application tracing is a detailed record of actions performed by the application and of messages about events that occur during operation of the application. During the tracing process, the application creates a set of files with data about the operation of different application components (for example, SRV.log, WD.log, and others).

Application tracing should be performed under the supervision of Kaspersky Technical Support.

To create an application trace file:

1. In the main application window, click the button.
2. In the window that opens, click the Support Tools button.
3. Use the Enable application tracing toggle to enable or disable tracing of application operation.
4. In the Tracing drop-down list, select an application tracing mode:
   • With size limitation. Save traces to a limited number of file sets of limited size and overwrite the older files when the maximum size is reached. If this mode is selected, you can define the maximum number of file sets for rotation and the maximum size for each set of files.

     By default, the application saves five sets of trace files. The size of each set of files is 3072 MB. This way, you need 15 GB of free disk space to save the trace files.

   • Without limitations. Save one trace file (no size limit).
5. In the Level drop-down list, select the tracing level.

   You are advised to clarify the required tracing level with a Technical Support specialist. In the absence of guidance from Technical Support, set the tracing level to Normal.

6. Restart Kaspersky Endpoint Security.
7. To stop the tracing process, return to the Support Tools window and disable tracing.

You can also create trace files when installing the application from the command line, including by using the setup.ini file.

As a result, application operation trace files are created in the %ProgramData%\Kaspersky Lab\KES.21.17\Traces folder. After the trace files are created, send the files to Kaspersky Technical Support.

Kaspersky Endpoint Security automatically deletes trace files when the application is removed. You can also delete the files manually. To do so, you must disable tracing and stop the application.