How to Disable verbose/debug logging RRS feed

  • Question

  • Hello,

    I know and it is a preview and it could make sense to have verbose logging on by default but just after a few days in my lab environment, I already have the following folder with a size of 1.5 GB

    C:\Program Files\Microsoft Advanced Threat Analytics\Center\Logs

    When I have a look inside, it is filled with plenty of trace prefixed as "Debug".

    Is there a switch (registry value) that I can use to disable verbose logging, and only enables when required ?



    Wednesday, May 13, 2015 9:44 AM


  • Hi,

    Under "C:\Program Files\Microsoft Advanced Threat Analytics\Center" there is a file called NLog.Common.Rules.config

    You can change the minLevel in these lines:

    <logger name="*" minlevel="Debug" writeTo="file" />
    <logger name="*" minlevel="Error" writeTo="errorsFile" />

    The first line is a configuration for the general log file and the second line is a configuration for the "-Errors.log" file

    You can set the minLevel to one of the following higher verbosity levels:

    Info, Warn, Error, Fatal

    There is another file called NLog.config. Do the same there.

    After you change this configuration, you'll need to restart the service (do the same for the Gateway service if needed).

    By default we archive every log file when it reaches 50MB and we keep 10 archived file for each target file.


    ATA Team.


    • Marked as answer by Sylvain06 Thursday, May 14, 2015 7:11 AM
    Wednesday, May 13, 2015 5:28 PM