How to read the logs
The log files are plain text files that can be opened with any text editor.
For MetaDefender Storage Security, the default logging level is set to Information. To access additional log levels, you need to enable Extra Logging in the Configuration. Extra logging is recommended only for troubleshooting purposes and should be enabled only when necessary.
For more details, refer to this article: How to Enable Extra Logging in the Configuration?
File Locations
Linux: Log files are located at
/etc/mdss/services_logsWindows: The default path is
C:\Program Files\OPSWAT\MetaDefender Storage Security\services\
Log Format
The messages stored in the service logs follow this format:
Example:
Log Levels
Debug : Provides detailed information useful for troubleshooting.
Information: The default logging level, capturing general operational messages.
Warning: Highlights potentially harmful situations.
Error: Logs issues that affect functionality or cause interruptions.
Fatal: Reserved for very critical issues that require immediate attention.
If you have any difficulty reading MetaDefender Storage Security logs, please create a support case or chat with our support engineer.
Analysis Guide
This guide helps customer support representatives efficiently locate error messages in product logs when troubleshooting customer issues.
Storage-type specific code (Amazon S3, Azure, Google Cloud, Box, SharePoint, SFTP, FTP, and so on) runs inside the central Storages, Discovery and Remediations services, and inside the Scanning service when it downloads files, so their errors appear in those services' logs. Only NFS and SMB have a separate sidecar service with its own log folder.
Behavior | Log folder under |
|---|---|
Failed to add a storage unit |
|
Failed to add MD Core or Cloud instance |
|
Failed to start a scan No files are discovered |
|
Failed to scan a file No files are scanned |
|
Failed to remediate a file Remediations not applied Sanitization failed Sanitization not applied |
|
Login or API key problems |
|
License not applied or expired |
|
Notifications (email, webhook) not sent |
|
Syslog or other external log output not received |
|