IT Endpoint Manager

Write to Local Log Database (Xcitium Format)

The log is saved in native Xcitium format on the local endpoint.

You can enable extended logging for the following additional items:

• Process creation events

• XCS components are enabled/disabled by CC

• Changes to XCS configuration made by CC

• Submitting files to CAMAS or Valkyrie

Write to Syslog Server

Xcitium log events are written to a remote syslog server. If enabled you have to specify the hostname/IP address and port number settings for the server.

Host *

The host name or IP address of the syslog server.

Port *

The port number of the syslog server.

Write to Log File (CEF Format)

Logs are saved locally on the endpoint in Common Event Format (CEF) file format. If enabled, please specify the location of the CEF file.

Path

Enter the storage location path of the CEF file.

Write to remote server (JSON format)

Logs are saved in JavaScript Object Notation (JSON) format on a remote server. If enabled, please specify the hostname/IP address of the server, its connection port and the security token.

Host *

Enter the host name or IP address of the remote server.

Port *

Type the port number of the remote sever Xcitium to connect to.

Token*

Enter the security token to access the remote server.

Log file size (MB)

Specify the maximum limit for the size of the log file (Default = 100 MB).

Action when file log size reaches limit:

Specify behavior when the log file reaches a certain size.

Keep on updating it removing the oldest records

Once the log file reaches the maximum size, the file will be appended with the new log entries and the oldest entries will be deleted depending on the size of the new entries.

Move it to

Choose this option if you wish to move and save the log file when it reaches the maximum size.

The path to the folder for old log files *

If 'Move it to' is enabled, type a destination path for the log file.

Send anonymous program statistics to Xcitium

If enabled, select the types of statistics sent from the following options:

Crash dumps

XCS sends dump files to Xcitium if the application crashes or there is a BSOD (blue screen of death) on the endpoint.

This is useful for analysis and troubleshooting.

Telemetry Reports

Will send to Xcitium a daily log about the files you scan with XCS. We use this data to improve Xcitium and XCS.

The reports contain the following details:

• The hash value and path of the file

• The hash value(s) and path of the parent file that executed the file

• Size, certificate information, and attributes of the file