Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Collect SCP MER Logs and Debug Data on macOS

  1. Last updated
  2. Save as PDF

Use this topic to collect SCP MER logs, enable debug logging, and gather supporting diagnostics such as network captures and crash reports for troubleshooting SCP-related issues.

Prerequisite

Ensure required tools are available before you begin data collection.

Enable Debug Logging

Enable debug logging to capture detailed SCP and AAC activity, which helps identify the root cause of issues during troubleshooting.

Enable SCP Policy Debug Logging

Configure the SCP policy to log all client-side events: 

  1. Open the ePO console.
  2. Navigate to SCP Policy.
  3. Select the required policy.
  4. Click Client Configuration.
  5. Go to Log File Settings (OS X Only).
  6. Select Log all messages.

Enable Arbitrary Access Control (AAC) Debug Logging

Increase AAC logging verbosity to capture detailed access control events and system interactions.

  1. Open a terminal session.
  2. Run the sudo vi /usr/local/McAfee/fmp/AAC/var/logConfig.xml command with administrator privileges. 
  3. Locate the <LogSeverityLevel> entry.
  4. Set the value to 6: <LogSeverityLevel>6</LogSeverityLevel>
  5. Save the file and restart the host.

Collect SCP MER Log

Generate and export the MER log to capture system and product diagnostics required for analysis.

  1. Click the Mac menu bar icon.
  2. Open McAfee Endpoint Security for Mac.
  3. Select Console.
  4. Go to Help.
  5. Click Run MerTool.
  6. Save the generated log file.
  7. Share the log file with Technical Support.

Capture Network Traffic (For Redirection Issues)

Capture network traffic to analyze request flow, redirection behavior, and involved endpoints.

  1. Launch Wireshark.
  2. Start a capture during the affected session.
  3. Reproduce the issue.
  4. Stop the capture.
  5. Document all relevant IP addresses and hostnames involved in the session.
  6. Share the capture file with Technical Support.

Collect Crash Reports (If Available)

Identify and collect crash data to diagnose unexpected application or service failures.

Check Crash Reports in Console

Review system crash logs to identify failures related to SCP components.

  1. Click the Mac menu bar icon.
  2. Open Console.
  3. Navigate to Crash Reports.
  4. Check for crashes related to the following processes:
    • mcpd
    • fmpd
    • networkextension
  5. Note the findings.

Retrieve Crash Report Files

Collect raw crash report files for detailed backend analysis.

  1. Go to /Library/Logs/DiagnosticReports/
  2. Copy the relevant crash report files.
  3. Share them with Technical Support.
  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    This page has no tags.