Explore and implement logging for end-user devices running the AirWatch Agent.

Some logging may require additional components or requirements to gather.

iOS Devices

Method

Log Name

Description

Xcode

*.rtf

Contains information related to all device side transactions including MDM, Enrollment, access, and application run history.

Agent App w/ Debug enabled in SDK

Agentlog####.txt

Contains information on system messages and stack traces when devices throw errors that are written from applications with the Log class.

Crash Logs

*.crash

Contains information on application crashes that is stored on iOS devices

Enhanced log targeting (Apple)

N/A

For more information, see the Apple documentation on Profiles and Logs available on developer.apple.com.

macOS Devices

Method

Log Name

Description

Console.app

*.txt

Contains information related to all device side transactions including MDM, enrollment, access, and application run history.

/Library/Application Support/Airwatch/Data/Logs

AirWatchDaemon.log

Contains information needed to analyze issues with core macOS agent functionalities such as products, CAs, and agent profiles.

/Library/Application Support/Airwatch/Data/Logs/

AirWatchAgent.log

Contains information on the UI/UX functionality with the macOS Agent.

/Library/Application Support/Airwatch/Data/Logs

AirWatchAWCM.log

Contains information on the macOS Agent to AWCM connectivity.

/Library/Application Support/Airwatch/Data/Logs

AirWatchRemoteManagement.log

Contains information related to remote management communications.

/var/log/

System.log

Contains information on the mdmd and other OS specific activities. Not used for macOS 10.12+.

Sudo Log collect (/var/log/)

System.log

Contains information on the mdmd and other OS specific activities. Used only for macOS 10.12+

/var/log/

Install.log

Contains information on package installations including Munki

Enhanced log targeting (Apple)

N/A

For more information, see the Apple documentation on Profiles and Logs available on developer.apple.com.

/Library/Application Support/AirWatch/Data/Munki/managed installs/logs/

ManagedSoftwareUpdate.log

Main Munki logging file. Which will contain information pertaining to application deployment of .dmg MAC OS applications.

/Library/Application Support/Airwatch/Data/Munki/munki_repo/munkiData/

Munki_data.plist

Munki Data Cache

/Library/Preferences/

AirWatchManagedInstalls.plist

Munki preference file

/Library/Application Support/AirWatch/Data/Munki/Managed Installs/

InstallInfo.plist

Munki install list

/Library/Application Support/AirWatch/Data/Munki/Managed Installs/

ManagedInstallReport.plist

Munki managed install report

/Library/Application Support/AirWatch/Data

AppStatuses_WS1.plist

WS1 app install status percentages

Android Devices

Method

Log Name

Description

ADB/Android Studio/RXLogger

*.txt

Contains information on app level traffic such as system messages and stack traces.

Agent Debug Logs

*.txt

Contains information on app level traffic such as system messages and stack traces filtered to the AirWatch Agent and PackageManager.

DumpState Logs

*.txt

Contains information collected from Android Debug Bridge (ADB) without active connection to device and used for historical logging.

Android Enterprise Wipe Logs

If an Android device in your deployment is enterprise-wiped, additional logs are available.

To capture the latest set of logs, tap the AirWatch Agent welcome screen header on the affected device 5 times. The device opens any available email app on the device where you can send the additional logging to administrators or support to help with investigation.

This logging function requires a minimum version of AirWatch Agent for Android v8.1.

Windows Phone Devices

Method

Log Name

Description

Field Medic

*.etl

Contains information on enrollment and most other MDM related functions.

Windows Desktop Devices

Method

Log Name

Description

Windows Event Viewer

*.evtx

Contains information on enrollment using Work Access and MDM functions that do not require the Protection Agent (Samples, Profiles, Commands).

/AirWatch/UnifiedAgent/Logs/

AWprocessCommands.Log

Contains information on installs that utilize the Protection Agent such as encryption and product provisioning.

/AirWatch/UnifiedAgent/Logs/

AWLPC.Log

Contains information related to the communications between the Protection Agent and AirWatch

/AirWatch/UnifiedAgent/Logs/

NativeEnrollment.log

Contains information around the AirWatch Agent-Based enrollment method.

/AirWatch/UnifiedAgent/Logs/

PowershellExecute.log

Contains information on PowerShell commands that are run via product provisioning.

/AirWatch/UnifiedAgent/Logs/

AwclClient.log

Contains information on communications between AWCM client and AirWatch.

/AirWatch/UnifiedAgent/Logs/

TaskScheduler.log

Contains information on the Task Scheduler’s local enforcement of policies.

/AirWatch/UnifiedAgent/Logs/

SSOCommunicationHandler.log

Contains information on post enrollment SSO for AirWatch Agent.

/AirWatch/UnifiedAgent/Logs/

RMService.log

Contains information around the AirWatch Agent-Based enrollment method.

Windows Rugged Devices

Method

Log Name

Description

/AirWatch/Logs

Awregisterdevice

Contains information on device registration that occurs during the enrollment process.

/AirWatch/Logs

AWService.log

Contains information on communications between the device and AirWatch including managed beacon and interrogator samples.

/AirWatch/Logs

AWApplicationManager.log

Contains information related to product provisioning.

/AirWatch/Logs

AWProcessCommands.log

Contains information for commands sent from AirWatch such as profiles, applications, and product provisioning.

/AirWatch/Logs

FusionwlanSetup

Contains information on fusion Wi-Fi profile changes.

Root

AW_Setup

Contains information on the AWMasterSetup such as agent install and uninstall processing on a device.

/AirWatch/Logs

Awcmclient

Contains information on communications between AWCM client and AirWatch.

/AirWatch/Logs

Awapplauncher

Contains information on the application launcher executable. Only present if the App Launcher utility is assigned and utilized by device.

/AirWatch/Logs

Awapplyprofile

Contains information on agent settings SML file which is generated during enrollment.

/AirWatch/Logs

emScript

Contains information on the native system performance.