Enabling Roaming Client Trace Logs

Overview

In some circumstances Cisco Umbrella support may ask you to enable more verbose 'trace' logging for the Umbrella Roaming Client. This article will show you how to do this for all Umbrella products.

Trace logging can be enabled by creating a flag file and placing it in one of the directories outlined below. Umbrella support can provide the file, or you can create it yourself.

Windows

Place loglevel.flag into the following directory:

Umbrella Roaming Client

C:\ProgramData\OpenDNS\ERC

AnyConnect with Roaming Security Module 

C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Umbrella\data

Cisco Secure Client with Roaming Security Module 

C:\ProgramData\Cisco\Cisco Secure Client\Umbrella\data

If creating the file yourself, it must contain the word "trace" without quotes and be saved as loglevel.flag, not loglevel.txt or loglevel.flag.txt.

Once the flag file has been placed in the directory, please restart the roaming client service for it to take effect.

macOS

Place force_log_level.plist into the following directory:

Umbrella Roaming Client

/Library/Application Support/OpenDNS Roaming Client

AnyConnect with Roaming Security Module

/opt/cisco/anyconnect/umbrella/data

Cisco Secure Client with Roaming Security Module 

/opt/cisco/secureclient/umbrella/data

If creating the file yourself, make sure you save the file as force_log_level.plist. 

The contents of the file should be as follows:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>logLevel</key>
<string>trace</string>
</dict>
</plist>

Once the flag file has been placed in the directory, please restart the roaming client service for it to take effect.