Follow the steps below to request a diagnostic action from an ESET security product on a client computer.

Select the Diagnostics task > click New.


Enter basic information about the task, such as the Name and optional Description. Task Category and Task Type are pre-selected based on your previous choice. The Task Type (see the list of all Client Tasks) defines the settings and the behavior for the task.


Diagnostic action

Run Log Collector - Collects specific data (such as configuration and logs) from a selected machine in order to facilitate the collection of information from the customer's machine during a support case resolution.

oLog Collector parameters - To collect all available data, leave Log Collector parameters field blank. To specify Log Collector parameters, see the list of individual parameters according to operating systems: Windows, MacOS or Linux.


The file size limit for log delivery per device is 16MB. If the logs gathered by the task are greater, the task will fail with the  "Log collector output exceeded 16MB and will not be transferred." message. If this occurs, either change the verbosity of the logs and retry the task or gather the logs locally on the device.

Set Diagnostic mode - Diagnostic mode consists of following categories: Spam log, Firewall log, HIPS log, Device control log and Web control log. The main purpose of Diagnostic mode is to collect logs with all severity levels when troubleshooting is needed.

oTurn on - Turn on logging of all ESET applications.

oTurn off - You can turn off logging manually or logging will be automatically turned off after a computer restart.

The following prerequisites are needed for successful creation of Diagnostic logs:

Diagnostic mode logs can be collected from client computers running Windows and macOS operating systems.

Client computer must have ESET security product installed and activated.


ESET Management Agent only sends logs collected by an ESET product installed on a client computer. Log category and verbosity depends on product type and configuration. Configure each product (via Policies) to collect specific logs.

Diagnostic logs older than 24 hours are removed every day during the midnight cleanup. This protects ESMC database from overload.


Review the summary of configured settings and click Finish. The Client Task is now created and a pop-up window will open. We recommend that you click Create Trigger to specify when this Client Task should be executed and on what Targets. If you click Close, you can create a Trigger later. To create a trigger afterward, select the client task instance and select Run on from the drop-down menu.


You can view the created logs in Computer details.