To enabling debug logging for the OfficeScan agent:
[Debug]
Debuglog=C:\ofcdebug.log
debuglevel=9
debugLevel_new=D
debugSplitSize=10485760
debugSplitPeriod=12
debugRemoveAfterSplit=1
LogServer.exe automatically runs each time the OfficeScan agent endpoint starts. Instruct users NOT to close the LogServer.exe command window that opens when the endpoint starts as this prompts OfficeScan to stop debug logging. If users close the command window, they can start debug logging again by running LogServer.exe located in <Agent installation folder>.
Disable debug logging for the OfficeScan agent by deleting ofcdebug.ini.