We have SolidCore agents installed on our systems. Is it possible to collect the logs/events generated by SolidCore agents without using ePO (since we dont have it)? Is the log file stored on the systems or can we send the events to the a remote log server?
Thanks in advance
App Control events are logged in event viewer locally on the client. You can use event forwarding to a remote central collector provided you are running a supported Windows version client.
Thanks for the reply. I will check out the event viewer tomm and check what kind of events are being logged. Is there a documentation of the list of events generated by SolidCore that I can refer to? Also, is there a setting that specifies which all events are to be generated in event viewer or all events are generated by default?
You can find it in the product guide in Appendix.
All events are generated by default. You can use loglevel command to customize events and source.
Please use the CLI guide for more details. That will come in handy ince you are not using ePO.