Troubleshoot a Failed Windows Agent Installation
Use the following troubleshooting tips if your Windows agent fails to install on the host.
Ensure that you are running the MSI installer with the required command line parameters:
ACCESSTOKEN
,SERVERURL
orCONFIGFILE
. Ensure you specify a valid access token identifier and server URL address. Or, if you created aconfig.json
configuration file with these parameters, ensure that you specify the file name in the command.If you see the following error message:
Could not copy CONFIGFILE to lacework dir
, you have an outdated configuration file. Ensure that your existing config.json file has the following format:{
"tokens": {
"accesstoken": "Your_Access_Token"
},
"serverurl": "Your_API_Endpoint",
<Optional_parameters>note
Please note that
serverurl
is optional if your Lacework tenant is deployed in the US, but mandatory for other tenants.- https://api.lacework.net - US
- https://aprodus2.agent.lacework.net - US-02 (US)
- https://api.fra.lacework.net - European Union (EU)
- https://auprodn1.agent.lacework.net - Australia and New Zealand (ANZ)
Open and inspect the following log files at
C:\Users\[username]\AppData\Local\Temp\Lacework
for information about the failed installation process.- LWInstaller.log - This is the installation log file. It contains records of all actions performed during the installation process and is particularly helpful if you encounter errors during installation.
- LWDataCollector_0.log - This is the agent log file. It contains records of all actions performed by the agent. If this file is present, it indicates that the installation was successful. However, the agent may have failed to start due to the following reasons:
- Invalid config.json file
- Invalid Lacework server URL
- Invalid agent access token
- Proxy errors
- Connectivity issues to the Lacework server
Collect more information about the installation failure by retrying the installation with verbose logging enabled using the following command in the PowerShell command line:
C:\Users\Administrator> msiexec.exe /i LWDataCollector.msi ACCESSTOKEN=Your_Access_Token SERVERURL=Your_API_Endpoint /L*V LWinstaller.log