Log Gathering in MetaDefender Distributed Cluster

Download support packages

From the web console of MetaDefender Distributed Cluster (MDDC), the administrator can easily download the support packages of the following services:

• MDDC Control Center
• MDDC Identity Service
• MDDC File Storage
• MDDC Worker including MDDC API Gateway or MetaDefender Core deployed by the worker.

Please refer to Remote Support Package Gathering for more information.

Collect service logs

Logs from the services Redis, RabbitMQ, and PostgreSQL need to be collected manually.

Redis - Caching Server

1. Run Terminal as root privilege (sudo).
2. Open Redis config file /etc/redis/redis.conf in edit mode e.g.:

$ vi /etc/redis/redis.conf

3. Find and replace logfile directive with your desired location.

logfile "<path/to/your/redis/log>.log"

4. Save the file, and restart Redis daemon.

$ sudo systemctl restart redis

5. Find and collect Redis log <path/to/your/redis/log>.log

RabbitMQ - Message Broker Server

Windows

1. Locate and collect RabbitMQ log files that match the pattern %APPDATA%\RabbitMQ\log\rabbit@<computer name>.log.
2. Locate and collect RabbitMQ upgrade log files that match the pattern %APPDATA%\RabbitMQ\log\rabbit@<computer name>_upgrade.log.

Linux

1. Run terminal as root privilege (sudo).
2. Run following command to retrieve RabbitMQ log location:

$ rabbitmq-diagnostics -q log_location

3. Access RabbitMQ log folder and find log files:
   • rabbit@<computer name>.log
   • rabbit@<computer name>_upgrade.log

PostgreSQL - Database Server

Windows

1. Locate and collect log files that match the pattern C:\Program Files\PostgreSQL\12\data\log with names postgresql-<yyyy-mm-dd>_<HHMMSS>.log

Linux

1. Run terminal as root privilege (sudo).
2. Open the PostgreSQL config file /etc/postgresql/12/main/postgresql.conf in edit mode e.g.:

$ vi /etc/postgresql/12/main/postgresql.conf

3. Find and turn logging_collector directive on :

logging_collector = on

4. Save the file and restart PostgreSQL daemon, e.g.:

$ sudo systemctl restart postgresql

5. Locate and collect log files that match the pattern /var/lib/postgresql/12/main/log/postgresql-<yyyy-mm-dd>_<HHMMSS>.log.