Settings of the Agent are stored in the Windows OS registry in the HKEY_LOCAL_MACHINE\SOFTWARE\IDAVLab\Enterprise Suite\Dr.Web Enterprise Agent\Settings branch. For the parameters set by switches, the parameter name coincides with the switch name.
The list of GUS servers the Agent can connect to is stored in .config files in repository subfolders (for Windows OS - DrWeb Enterprise Server\var\repository\).
When the Agent is started with explicitly specified parameters, the specified settings are used not only in the current session, but are also written to the registry and become constant. Thus, if the Agent is run for the first time with all necessary settings, at subsequent starts it is unnecessary to specify any parameters.
|
Agent parameters which are set directly at the station are reset with parameters received from the Server. If the list of Servers to which the Agent connects, is set as empty at the Server, the list of Servers which is set at the station is used. |
Enterprise Agent is run by the system as a service and is administrated through Control Panel.
The start instruction format:
drwagntd [<switches>] [<servers>]
Possible switches:
◆-compression=<mode> — the compression mode of the traffic with the Server. Possible values are yes, no, possible, the default value is possible.
◆-control=<action> — administrating the state of the Agent service.
Possible actions:
•install — install the service,
•uninstall — uninstall the service,
•start — run the service (only Windows NT OS and later),
•stop — terminate the service (only Windows NT OS and later),
•restart — restart the service (only Windows NT OS and later).
◆-crypt=<mode> — the encryption mode of the traffic with the Server. Possible values are yes, no, possible, the default value is yes.
◆-drweb-key=<license_key> — user license key file. This key will be used by the client software, if it does not visit the Server for a long time and in case the key received from the Server has expired. When the Agent is connected to the Server, this key is not required. By default, it is an arbitrary valid key in the folder set by the –home parameter.
◆-help — generate help on the format of the instruction and its parameters. The same is for -help of the interface module, read Appendix H2. Dr.Web Enterprise Agent Interface Module.
◆-home=<folder> — the folder to which the Agent is installed. If the switch is not set, the folder where the executable file of the Agent resides is meant.
◆-key=<public_server_key> — a file of the Server public key, by default, it is drwcsd.pub in the folder set by -home.
◆-log=<log_file> — Agent log file. By default it resides in the logs subfolder of the Agent installation folder. When uninstalling the Agent software, the deinstallation log is saved to the system temporary folder.
◆-retry=<quantity> — the number of attempts to locate the Server by sending multicast-requests (if Server search is used) before the failure is reported. 3 is set by default.
◆-rotate=<N><f>,<M><u> - Agent log rotation mode, where:
•<N> - total number of log files (including current log file);
•<f> - log files storage format, possible values: z (gzip) - compress file, uses by default, or p (plain) - do not compress files.
•<M> - file size;
•<u> - unit measure, possible values: k (kilo), m (mega), g (giga).
By default, it is 10,10m, which means storing of 10 files 10 megabytes each, use compression. Alternatively you can use the none format (-rotate=none), which means "do not use rotation, always write to the same file of unlimited size".
In the rotation mode, log file names are generated as follows: file.<N>.log or file.<N>.log.dz, where <N> - sequence number: 1, 2, etc.
For example, the log file name is set to file.log (see the –log switch above), then
•file.log — current log file,
•file.1.log — previous log file,
•file.2.log and so on — the greater the number, the older the version of the log.
◆-save <IP_address> — verifies Server IP address value and saves parameters in registry.
◆-spiderstat=<interval> — interval in minutes for the SpIDer Guard‘s statistics to be sent to the Server; the default value is 30. The statistics will be sent to the Server at such intervals provided that the statistics has been changed during the interval.
◆-timeout=<time> — the waiting limit of each reply in seconds for Server searching. Reply messages reception will be active, while the reply waiting time is not exceed the timeout value. 5 is set by default.
◆-trace — to log in detail the location of error origin.
◆-verbosity=<details_level> — log level of detail. INFO is by default. Allowed values are: ALL, DEBUG3, DEBUG2, DEBUG1, DEBUG, TRACE3, TRACE2, TRACE1, TRACE, INFO, NOTICE, WARNING, ERROR, CRIT. The ALL and DEBUG3 values are synonyms (see also Appendix L. Log Files Format).
|
This switch defines the log level of detail set by the subsequent -log switch (read above). One instruction can contain several switches of this type.
The -verbosity and -log switches are position-relative. In case of using these keys simultaneously, the -verbosity switch must be set before the -log switch: the -verbosity switch redefines detail level of logs, that reside in folder, specified in the following switch. |
Servers
<servers> — list of Servers. By default - drwcs@udp/231.0.0.1:2193, which instructs to search the drwcs Server using multicast requests for group 231.0.0.1 port 2193.