Skip to main content

Troubleshoot a Failed Windows Agent Installation

Use the following troubleshooting tips if your Windows agent fails to install on the host.

  • Ensure that you are running the MSI installer with the required command line parameters: ACCESSTOKEN, SERVERURL or CONFIGFILE. Ensure you specify a valid access token identifier and server URL address. Or, if you created a config.json configuration file with these parameters, ensure that you specify the file name in the command.

  • If you see the following error message: Could not copy CONFIGFILE to lacework dir, you have an outdated configuration file. Ensure that your existing config.json file has the following format:

    {
    "tokens": {
    "accesstoken": "Your_Access_Token"
    },
    "serverurl": "Your_API_Endpoint",
    <Optional_parameters>
    note

    Please note that serverurl is optional if your Lacework tenant is deployed in the US, but mandatory for other tenants.

  • Open and inspect the following log files at C:\Users\[username]\AppData\Local\Temp\Lacework for information about the failed installation process.

    • LWInstaller.log - This is the installation log file. It contains records of all actions performed during the installation process and is particularly helpful if you encounter errors during installation.
    • LWDataCollector_0.log - This is the agent log file. It contains records of all actions performed by the agent. If this file is present, it indicates that the installation was successful. However, the agent may have failed to start due to the following reasons:
      • Invalid config.json file
      • Invalid Lacework server URL
      • Invalid agent access token
      • Proxy errors
      • Connectivity issues to the Lacework server
  • Collect more information about the installation failure by retrying the installation with verbose logging enabled using the following command in the PowerShell command line:

    C:\Users\Administrator> msiexec.exe /i LWDataCollector.msi ACCESSTOKEN=Your_Access_Token SERVERURL=Your_API_Endpoint /L*V LWinstaller.log