Views:

Procedure

  1. Edit TmOsprey.ini located in <Agent installation folder> as follows:
    [InteractiveSession]
    Enable=1
    LogFolder=C:\temp
    [ServiceSession]
    Enable=1
    LogFolder=C:\temp
  2. Reload the Security Agent.
  3. Check the yyyy-mm-dd_hh-mm-ss_EE_TmOsprey1.etl in C:\temp.