1. Malwarebytes Support
  2. Business Solutions
  3. Malwarebytes Nebula
  4. Troubleshoot

Collect Malwarebytes Endpoint Agent diagnostic logs

  • Updated

If a managed Windows or Mac endpoint encounters issues with the Malwarebytes Endpoint Agent, you may need to collect diagnostic logs for investigation, or to submit them to our Support team for troubleshooting the issue. This article explains how to generate diagnostic logs via the Malwarebytes Nebula console, and how to manually collect them from an endpoint.

Generate endpoint agent diagnostic logs using one of the following methods:

Generate Diagnostic Logs from the Nebula console

  1. Log in to the Malwarebytes Nebula platform.
  2. Go to Endpoints.
  3. Check the box for one or more endpoints.
  4. Click Actions > Generate Diagnostic Logs. This task may take a few minutes to complete. You can check the task status on the Tasks page.
  5. When the task is successful, click the name of the endpoint(s) to view the Endpoint Details page.
  6. At the top-right corner of the Endpoint Details page, click the Diagnostic Logs Available icon 2021-01-04_11-36-33.png to download the Diagnostic Logs zip folder to your local machine.  

If you cannot generate diagnostic logs within Nebula, follow one of the manual collection steps below for Windows and Mac endpoints. 

Manually collect Windows endpoint logs

Logs for Windows operating systems can be generated either from the task bar icon or from Windows command line.

Generate logs from task bar icon

  1. Reproduce the issue so the Malwarebytes Endpoint Agent can run and generate new data.
  2. Locate the Malwarebytes icon in the task bar tray.
  3. Hover over the icon, hold CTRL and right-click. Select Generate Diagnostic Logs.
    DOC-1818-1.png
  4. A log collection start message displays. Click Ok.
  5. The log collection process takes a few minutes to run. When it completes, the file MBDiagnostics.zip saves to the desktop. Send the file to Malwarebytes Support.
    DOC-1818-2.png

Generate logs from command line

  1. Reproduce the issue so the Malwarebytes Endpoint Agent can run and generate new data.
  2. Open Command Prompt as an administrator.
  3. Run the following command: 
    • "C:\Program Files\Malwarebytes Endpoint Agent\Useragent\EACmd.exe" -diag
      mceclip0.png
  4. The log collection process takes a few minutes to run. When it completes, the file MBDiagnostics.zip saves to the desktop. Send the file to Malwarebytes Support.
    DOC-1818-4.jpg

Manually collect Mac endpoint logs

Mac Endpoint Agents do not support command line log generation. Follow the steps below to generate logs from the Malwarebytes menu bar icon. You can also manually locate the log files.

Generate logs from the Malwarebytes menu bar icon

  1. Reproduce the issue so the Malwarebytes Endpoint Agent can run and generate new data.
  2. Locate the Malwarebytes icon in the menu bar.
  3. Right-click on the Malwarebytes icon (or hold the Control key and left-click) and select Generate Diagnostic Logs.
    DOC-1818-5.JPG
  4. After the above commands execute, the file Diagnostic_info-?.zip is created and saved to:
    /Library/Application Support/Malwarebytes/Malwarebytes Endpoint Agent/Diagnostics

  5. Attach this folder to your email reply to Malwarebytes Support.

Manually locate log files

  1. Press Shift-Command-G to open the Go to Folder window.

  2. In the Go to Folder window, enter the following file path:
    /Library/Application Support/Malwarebytes/Malwarebytes Endpoint Agent
    DOC-1818-6.png

    If this computer has Malwarebytes Endpoint Agent v1.1 or older installed, enter this path:
    /Library/Application Support/Malwarebytes/NebulaAgent

  3. Press Return.

  4. Save the Logs folder to your desktop.
  5. Double-click the Data folder.
  6. Save the settings.dat file to your desktop.
  7. If you are troubleshooting installation issues with Malwarebytes Anti-Malware for Mac, press Shift-Command-G, then enter the following file path:
    /var/log/install.log
    DOC-1818-7.png

  8. Save the install.log file to your desktop.

  9. Press Shift-Command-G and enter this file path:
    /var/log/com.malwarebytes.EndpointAgent.log

  10. Save the com.malwarebytes.EndpointAgent.log file to your desktop.

  11. Send the logs you saved to your desktop to Malwarebytes Support as an email attachment.

Enable debug logging

You can enable debug logging on the Malwarebytes Endpoint Agent to collect diagnostic logs. Both Windows and Mac endpoints support debug logging, which is enabled either from the Windows tray icon, Mac menu bar icon, or the command line.

For more information, see Enable debug logging on the Malwarebytes Endpoint Agent.