The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Server logs

  • Published on Sep 7, 2026
  • 1 minute(s) read
Prev Next

Server log files contain details about server functionality and various administrator services used by ePO - On-prem.

File name

Log type

Location

Description

EpoApSvr_<serverName>.log

Primary

[InstallDir]\DB\Logs

Application Server log file with details about repository actions such as:

  • Pull tasks

  • Checking in deployment packages to the repository

  • Deleting deployment packages from the repository

Note

This file is not present until after initial service startup.

Errorlog.<CURRENT_DATETIME>

Apache

[InstallDir]\Apache2\logs

Contains Apache service details.

Note

This file is not present until after the Apache service is started for the first time.

Eventparser_<serverName>.log

Primary

[InstallDir]\DB\Logs

Contains ePO - On-prem event parser services details, such as product event parsing success or failure.

Jakarta_service_ <DATE>_<serverName>.log

Tomcat

[InstallDir]\Server\logs[a]

Contains ePO - On-prem Application Server service details.

Note

This file is not present until after the initial Tomcat service startup.

Localhost_access_log.<DATE>.txt

Tomcat

[InstallDir]\Server\logs *

Records all ePO - On-prem server requests received from client systems.

Note

This file is not present until after the initial Tomcat service startup.

Orion_<serverName>.log

Primary

[InstallDir]\Server\logs *

Contains platform details and all extensions loaded by default.

Note

This file is not present until after the ePO - On-prem Application Server service is started for the first time.

Replication_<serverName>.log

Server

[InstallDir]\DB\Logs

The ePO - On-prem server replication log file. This file is generated only when all these criteria are true:

  • There are distributed repositories.

  • A replication task has been configured.

  • A replication task has run.

Server_<serverName>.log

Primary

[InstallDir]\DB\Logs

Contains details related to these ePO - On-prem server services:

  • Agent-server communications

  • ePO - On-prem Server Agent Handler

Note

This file is not present until after initial service startup.

Stderr_<serverName>.log

Tomcat

[InstallDir]\Server\logs *

Contains any Standard Error output captured by the Tomcat service.

Note

This file is not present until after the initial Tomcat service startup.

<AgentGuid>_<Timestamp>_ Server_manifest.xml

Policy

[InstallDir]\DB\DEBUG

Contains details about policy updating issues. To enable this file:

  1. Browse to this registry key: HKEY_LOCAL_MACHINE\Software\Network Associates\ePolicy Orchestrator\

  2. Create this DWORD with value 1: SaveAgentPolicy

  3. Restart the Trellix ePolicy Orchestrator - On-premises Server (Apache) service.

Tip

Enable this file for the minimum time to capture the required information, because the resulting files grow rapidly.

[a] In cluster environments, the log file is at [InstallDir]\Bin\Server\logs.