The KAgent.log file is included in the KACE Agent Toolkit (KAT) output. Please reference KB 276850 and KB 263376 for use of the KACE Agent Toolkit:
Detection Logs
Below you will find excerpts from the KAgent.log depicting a KACE SMA client machine, during patch Detection for KB4512937 - 2019-07 Servicing Stack Update for Windows 10 Version 1809 x64.
Some Detection entries to note:
- The first patching entries we find pertain to the HANDSHAKE, along with the download of files required for the handshake to complete successfully:
[2019-08-01.14:40:59][KPlugins(5788):CreatePlugin ] Plugin Command: KPluginPatching HANDSHAKE
[2019-08-01.14:40:59][KPlugins(5788):KWeb::DownloadUsi] DownloadFile: Downloaded C:\ProgramData\Quest\KACE\patches\HANDSHAKE.LST.gz from http://k1000.local/service/patchhandshake.php?kuid=01942a3b-1f78-4f06-a92a-0ab88d6bbf15&path=windows/ Download speed: 8589.000000 bytes/second
[2019-08-01.14:40:59][KPlugins(5788):KWeb::DownloadUsi] DownloadFile: Downloaded C:\Program Files (x86)\Quest\KACE\windependencies.ospx from http://k1000.local/patches/windependencies.ospx Download speed: 143176583.000000 bytes/second
[2019-08-01.14:41:00][KPlugins(5788):KWeb::DownloadUsi] DownloadFile: Downloaded C:\Program Files (x86)\Quest\KACE\winsecuritydefinitions.ospx from http://k1000.local/patches/winsecuritydefinitions.ospx Download speed: 13107625.000000 bytes/second
- When the HANDSHAKE tasks complete successfully, we find the upload back to the the SMA:
[2019-08-01.14:41:28][KPlugins(7796):KWeb::UploadUsing] UploadFile: uploading file C:\ProgramData\Quest\KACE\patches\HANDSHAKE_OUTPUT.txt.gz to http://k1000.local/service/kbot_upload.php?checksum=dddd028ad01adef62f5903ed06aa5803d2344d8e493ac075f0292b42ddc16f6b3bdea85bb39218d88c13599ab8f0744facdf03f3d36c5a0ff5aef4bd8361fc0e
* We are completely uploaded and fine
- Here we find creation of the Patch Detection Schedule, along with the schedule ID number, in this case 'patchscheduleid=2'
[2019-08-01.14:41:58][KPlugins(6160):CreatePlugin ] Plugin Command: KPluginPatching DETECT
http://k1000.local/service/patchdetect.php?kuid=01942a3b-1f78-4f06-a92a-0ab88d6bbf15&patchscheduleid=2
- Here we find the agent verify the download of the *.pls file used for detection:
[2019-08-01.14:41:58][KPlugins(6160):ParsePatchFile::I] pluginPatching:IsDownloadReq: Located checksum file C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls.checksum for C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls
[2019-08-01.14:41:58][KPlugins(6160):ParsePatchFile::I] pluginPatching:IsDownloadReq: existing checksum is 456af0037e1d3add93bc512e0fa3bef0 and new checksum is 456af0037e1d3add93bc512e0fa3bef0
- Here we find that KPATCH.exe is running a detect task on the client desktop:
[2019-08-01.14:41:59][kpatch:SetNameValue ] SetNameValue: -detect
[2019-08-01.14:41:59][kpatch:main ] detecting: plsFile='C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls'
- Here we find the Detection results for 2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937):
[2019-08-01.14:42:25][kpatch:PatchLink::DetectPatch ] pluginPatching: DetectPatch RC: 1
[2019-08-01.14:42:25][kpatch:main ] detect: pls='C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls' puid='{86A596BD-3C85-4C6D-B9DD-3FDD956DE9D1}' rc='NOT patched' error=0 opFile='C:\ProgramData\Quest\KACE\kpatch.out'
[2019-08-01.14:42:25][kpatch:PatchLink::WriteOutput ] WriteOutput() writing to file: 'C:\ProgramData\Quest\KACE\kpatch.out' contents: 'puid={86A596BD-3C85-4C6D-B9DD-3FDD956DE9D1}
detect_result=1
error=0
- Here we find the upload of the detection results back to the KACE SMA:
[2019-08-01.14:42:28][KPlugins(4720):KWeb::UploadUsing] UploadFile: uploading file C:\ProgramData\Quest\KACE\patches\PATCH_SIGNATURE_DETECT.txt.gz to http://k1000.local/service/kbot_upload.php?checksum=37bda8b2b13ffe49228da551ec83d6822b733dc986ca321937fa4cc993efd4b9e20c59fc067b29a8803c366f0e6957eee14db4ab6cfa7edc35b76ba579149d0d
If no error is encountered, there are Three possible detection results:
- RC: 0
- rc= 'patched'
- detect_result=0
- RC: 1
- rc= 'NOT patched'
- detect_result=1
Deployment Logs
Below you will find excerpts from the KAgent.log depicting a KACE SMA client machine, during patch Deployment for KB4512937 - 2019-07 Servicing Stack Update for Windows 10 Version 1809 x64.
Some Deployment entries to note:
- These entries indicate that the Patch Deployment Schedule is configured to alert the user before deployment, and that the user selected the option "OK":
[2019-08-01.14:43:28][KPlugins(2420):CreatePlugin ] Plugin Command: KPluginDesktopAlerts Tasks waiting to be performed. Press OK to continue.,ok\,snooze\,cancel,300,ok
[2019-08-01.14:43:38][KPlugins(2420):KPluginDesktopAle] Alert: user picked OK.
- Here we find creation of the Patch Deployment Schedule, along with the schedule ID number, in this case 'patchscheduleid=2'
[2019-08-01.14:43:58][KPlugins(4696):CreatePlugin ] Plugin Command: KPluginPatching DEPLOY
http://k1000.revival.local/service/patchdeploy.php?kuid=01942a3b-1f78-4f06-a92a-0ab88d6bbf15&patchscheduleid=2
- Here we find the agent downloading the *.plp file from the KACE SMA server:
[2019-08-01.14:43:59][KPlugins(4696):KWeb::DownloadUsi] DownloadFile: Downloaded C:\ProgramData\Quest\KACE\patches\Windows10.0-KB4512937-x64.cab from http://k1000.local/patches/plp/DF/DF4C0473-B630-4866-A480-E95CC3F3331F/windows/Windows10.0-KB4512937-x64.cab Download speed: 180051820.000000 bytes/second
- Here we find that KPATCH.exe is running a patch task on the client desktop:
[2019-08-01.14:43:59][KPlugins(4696):KLaunchClient::Du] Launch State: Command="C:\Program Files (x86)\Quest\KACE\KPATCH.EXE " Arguments=" -patch -outputDir="C:\ProgramData\Quest\KACE" -patchDir="C:\ProgramData\Quest\KACE\patches" -sigFullPath="C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls" -keyFile="C:\Program Files (x86)\Quest\KACE\kace.plk" -langString="0,1,255"" WorkingDir="" Timeout=3600000 ShouldDetach=0 ShowWindow=0 Redirect_stdout=0 Redirect_stderr=0 Desktop=winsta0\default Using Wait_Override=1
[2019-08-01.14:43:59][kpatch:PatchLink::_DPmsg ] DeployPatch: Deploying package DF4C0473-B630-4866-A480-E95CC3F3331F for patch C:\ProgramData\Quest\KACE\patches\DF4C0473-B630-4866-A480-E95CC3F3331F.plp for signature C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls
- Here we find the Deployment results:
[2019-08-01.14:44:14][kpatch:PatchLink::WriteKpatchOut] pls='C:\ProgramData\Quest\KACE\patches\2019-07 Servicing Stack Update for Windows 10 Version 1809 x64 (KB4512937).pls' success=TRUE error=0 needToRebootNow=FALSE needToRebootLater=TRUE opFile='C:\ProgramData\Quest\KACE\kpatch.out isManualPatch=FALSE'
There are Two primary deployment results:
Reboot Required
Below you will find excerpts from the KAgent.log a patch that requires a reboot after deployment, along with the reboot alert generated for the User:
Some Reboot entries to note:
- Here we find creation of the User Prompt prior to reboot, with an indication of the timeout delay interval and the default timeout action:
[2019-08-01.14:44:16][KPlugins(4696):ProcessRebootFlag] ProcessRebootFlags: Need to reboot, option=reboot=YesPromptYes 'Reboot Required for Patching...'
[2019-08-01.14:44:16][KPlugins(4696):KUAController::Cr] KUAController::CreateAlert input dump Command="C:\Program Files (x86)\Quest\KACE\KUserAlert.exe" Arguments="-suffix=32dc6d90d359a937632e1d0f865989f6 -name=!ENC!QChuYW1lX3BhdGNoaW5ncmVib290KQ==!ENC! -message=!ENC!IlJlYm9vdCBSZXF1aXJlZCBmb3IgUGF0Y2hpbmcuLi4iIA==!ENC! -title=!ENC!QCh0aXRsZV9wYXRjaGluZ3JlYm9vdCk=!ENC! -timeout=300 -yesno -default=snooze" wait=1
- Here we find the User's selection and the beginning of the reboot:
[2019-08-01.14:44:21][KPlugins(4696):ProcessRebootFlag] ProcessRebootFlags: Rebooting now, user picked Yes.
[2019-08-01.14:44:21][KPlugins(4696):KPluginPatching::] pluginPatching: going to reboot
- After the reboot we find the upload of the output file back to the SMA:
[2019-08-01.14:46:28][KPlugins(5996):KPluginPatching::] pluginPatching: attempting to upload result file C:\ProgramData\Quest\KACE\patches\PATCHING_OUTPUT.txt for the 1 time
[2019-08-01.14:46:28][KPlugins(5996):KWeb::UploadUsing] UploadFile: Server gzip compression is active
[2019-08-01.14:46:28][KPlugins(5996):KWeb::UploadUsing] UploadFile: uploading file C:\ProgramData\Quest\KACE\patches\PATCHING_OUTPUT.txt.gz to http://k1000.local/service/kbot_upload.php?checksum=8d458284a5ff744a58fd32c00c539c27b64dafea9e2c99f590c8686fa4708e4418de2adf27bbf4071bdef7ad3f89246326260f3748648a0a6ed065d7721a15fe
*Patching Log Entries will be interspersed with other agent tasks and activity log entries within the Kagent.log file, and may not exactly resemble the above entries. Patching Log Entries will also differ based on the specific configuration of each patch schedule.