What file to parse when a client task fails?

[Former Member]

What log(s) should I be looking at to figure out why a client task keeps failing?

[Former Member]

The Agent's FRMINST_(system).log file records installation of the McAfee Agent.

This file contains:

1.Informational Messages

2.Progress Messages

3.Failure messages if installation fails.

Folder location vary whether it was deployed by ePO or installed locally.

If deployed, it will be in the Windows\temp\mcafeelogs folder

If locally, it will be located in the documents and settings\(User Profile)\local settings\temp\mcafee.

[Former Member]

The agent installed correctly, but now I'm trying to deploy packages. I get the first two green bars fine on the server, then the third one goes red and the task shows as having failed in the server task log.

[jstanley]

First you might want to check and see if the task is actually successful. So it looks like you are running a task to remove EEPC 7.x so the question becomes is EEPC 7.X actually being removed on the client? If it is not then you need to review the EEPC install (or in this case uninstall) logs on the client to see why the task is failing. I'm not certain exactly what this log is for EEPC so if your not sure you might want to post a question to the EEPC forums asking where they keep thier install/uninstall logs.

If the task is actually successful on the client side but erroneously reporting failure on the ePO side you would need to check these logs:

• The Agent Log on the client located by default in: C:\ProgramData\McAfee\Common Framework\DB
• The server log on the ePO server located by default in: C:\Program Files\McAfee\ePolicy Orchestrator\DB\Logs
• The orion.log on the ePO server located by default in: C:\Program Files\McAfee\ePolicy Orchestrator\Server\logs

Also some point product install/uninstalls require a reboot before they report success or failure. This means the "run client task now" option will always report failure because when the client reboots it takes down the datachannel connection which is used to report this status back to ePO.

[Former Member · Accepted solution]

Before removing EEPC any version you must disable it on target client, from epo disable it  and send a "Agent wakup"call, verify that your client machine is decrypted, after this you can remove EEPC.

on 2/5/13 2:52:59 PM CST