Procedure

1. Create a file named ofcdebug.ini with the following content:
   [Debug]

   Debuglog=C:\ofcdebug.log

   debuglevel=9

   debugLevel_new=D

   debugSplitSize=10485760

   debugSplitPeriod=12

   debugRemoveAfterSplit=1
2. Send ofcdebug.ini to agent users, instructing them to save the file to C:\.
   LogServer.exe automatically runs each time the agent endpoint starts.
3. To start debug logging, reload the Security Agent or restart the endpoint.
   Instruct users NOT to close the LogServer.exe command window that opens when the endpoint starts as this prompts Trend Micro Apex One to stop debug logging. If users close the command window, they can start debug logging again by running LogServer.exe located in \Security Agent\Temp.
4. For each agent endpoint, check ofcdebug.log in C:\.
5. To disable debug logging for the Security Agent, delete ofcdebug.ini.