Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

Monitoring Data Transformation

Data Transformation Logs

search

Please Note:

printsuggest an editpdf paneldownload

Data Transformation Logs

The monitoring information for Data Transformation activity is recorded in three places:

  • The Message Logs window on Windows.

  • C:\ProgramData\Vormetric\DataSecurityExpert\agent\log\vordxf_path_usr.log

  • C:\ProgramData\Vormetric\DataSecurityExpert\agent\log\dataxform_status-gp and dataxform_status_alt-gp files

The logs contain the following log levels:

Log Level Description
ALL Turn on all logging
TRACE Finer-grained information than DEBUG
DEBUG Fine-grained informational events; used to debug
INFO Informational messages that highlight the progress of the application at coarse-grained level.
WARN Designates potentially harmful situations
ERROR Designates error events that might still allow the application to continue running.
FATAL Severe error events that will presumably lead the application to abort
OFF Turn off all logging

There are two log level command line options that change the dataxform logging.

  • Application Level Log --applog_level: Overrides what is sent by the key manager. This affects the log files that reside in /var/log/vormetric/vordxf. Defaults to the log level to which VMD logging is set.

  • Console Level Log --console_level: Affects the logging sent to the console (terminal). Defaults to INFO. For --help the console level cannot be FATAL or OFF. If so, no help is displayed.

copy link to clipboardNo logging set

 
~# dataxform --rekey_supported --gp /gp/nfs

Response

Checking if /gp/nfs is a guard point with a rekey policy applied
The kernel component doesn't support data transform on /gp/nfs
Verify this is a guard point with valid data transformation policy, and check the system log files for any other problems. It may be due to one or more of
following reasons; 1.policy has no valid key rule(s), and/or 2. policy has no key_op rule, and/or 3. policy has valid permit rule(s), and/or 4. policy rule
that contains key_op in the action field also specifies other actions.

copy link to clipboardConsole Logging set to Off

 
~# dataxform --rekey_supported --gp /gp/nfs --console_level OFF

copy link to clipboardConsole Logging set to All

 
~# dataxform --rekey_supported --gp /gp/nfs --console_level ALL

Response

Entering IsExistFileOrDir
Entering GetOSFullPathName
Entering ConvertToNetworkPath
Entering GetOSFullPathName
Entering ConvertToNetworkPath
Entering SignalThread
Entering initTransformLock
Entering InitializeTransformLock.
Entering initAutoTransform.
Entering InitializeAutoTransform.
Entering CreateProgressThread
Checking if /gp/nfs is a guard point with a rekey policy applied
Entering set requested rekey mode
Entering ConvertWCharToChar
Entering CheckKernelRekeySupport.
Entering ConvertWCharToChar
The kernel component doesn't support data transform on /gp/nfs
Verify this is a guard point with valid data transformation policy, and check the system log files for any other problems. It may be due to one or more of
following reasons; 1.policy has no valid key rule(s), and/or 2. policy has no key_op rule, and/or 3. policy has valid permit rule(s), and/or 4. policy rule
that contains key_op in the action field also specifies other actions.
Entering CleanupWorkerData

copy link to clipboardApplication Logging set to Info

 
~# dataxform --rekey_supported --gp /gp/nfs --applog_level INFO

Response

2024-05-14 21:37:55.949 [VMD] [INFO ] [459331] [DXF4344I] Data transform version 7.7.0.9054
2024-05-14 21:37:55.949 [VMD] [ERROR] [459331] [DXF4301E] The kernel component doesn't support data transform on /gp/nfs
2024-05-14 21:37:55.949 [VMD] [ERROR] [459331] [DXF4299E] Verify this is a guard point with valid data transformation policy, and check the system log files for any other problems. It may be due to one or more of following reasons; 1.policy has no valid key rule(s), and/or 2. policy has no key_op rule, and/or 3. policy has valid permit rule(s), and/or 4. policy rule that contains key_op in the action field also specifies other actions.

copy link to clipboardApplication Logging set to All

 
~# dataxform --rekey_supported --gp /gp/nfs --applog_level ALL

Response

2024-05-14 21:39:19.793 [VMD] [INFO ] [459437] [DXF4344I] Data transform version 7.7.0.9054
2024-05-14 21:39:19.793 [VMD] [DEBUG] [459437] Setting /gp/nfs rekey mode to 1
2024-05-14 21:39:19.793 [VMD] [DEBUG] [459437] Checking /gp/nfs to see if rekeying is supported
2024-05-14 21:39:19.793 [VMD] [DEBUG] [459437] Rekey process could not learn if rekey is supported or not.
2024-05-14 21:39:19.793 [VMD] [ERROR] [459437] [DXF4301E] The kernel component doesn't support data transform on /gp/nfs
2024-05-14 21:39:19.793 [VMD] [ERROR] [459437] [DXF4299E] Verify this is a guard point with valid data transformation policy, and check the system log files for any other problems. It may be due to one or more of following reasons; 1.policy has no valid key rule(s), and/or 2. policy has no key_op rule, and/or 3. policy has valid permit rule(s), and/or 4. policy rule that contains key_op in the action field also specifies other actions.
2024-05-14 21:39:19.794 [VMD] [DEBUG] [459437] Shutting down data transform agent.

On this page