Question
Where are the various Forensic Tools product logs located by default?
Answer
FTK Central: %PUBLIC%\Documents\AccessData\AccessDataLogs\adgselfhost.txt
Collab: %ProgramData%\CollabService\logs
FTK Plus: %APPDATA%\Accessdata\Logs\QViewLog.txt
OR: C:\Users\<service account>\AppData\Roaming\Accessdata\Logs\FTKPlusLog.txt
JobMonitor: %APPDATA%\Accessdata\Logs\JobMonitor.txt
FTK/ENT/LAB: %PROGRAMDATA%\AccessData\Products\Forensic Toolkit\<version>
Site Server: %PROGRAMFILES%\AccessData\Site Server\site_server.log
Distributed Processing Manager: <StateFolder>\logs
Processing Logs: <CaseFolder>\Jobs
DBConfig: %PUBLIC%\Documents\AccessData\AccessDataLogs\DatabaseUpgrade.txt
Service Pack Logs: %public%\Documents\AccessData\Forensic_ToolsLogs\patch_logs
Windows Agent:
On the Site Server: %PROGRAMFILES%\AccessData\Site Server\AgentLogs
On the Agent: Debug Logs for the Enterprise Agent
Mac Agent:
On the Agent: /Library/AccessDataAgent/<version>/Logs
On the Examiner: See the FTK Central log