> For the complete documentation index, see [llms.txt](https://help.security.gallagher.com/knowledge-hub/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.security.gallagher.com/knowledge-hub/products/cc-software/troubleshoot/command-centre-diagnostic-logs/command-centre-diagnostic-logs-gatheri.md).

# Gathering Logs - Why and how

## This page answers

* How do you raise the Command Centre logging level?
* How do you collect the logs for Technical Support?
* What must you set back to default afterward?

When Technical Support investigates a fault, they ask for logs from one or more locations, which could include the **Server**, **Workstation**, **Middleware Server**, **Controller**, and **Reader**. The usual flow is:

1. Raise the logging level where the fault lives (registry keys / config files).
2. Reproduce the issue. If it is difficult to replicate or happens intermittently, leave the logging running until it occurs. Note the exact time it happens.
3. Collect the logs (the **Support Log Tool** automates most of this).
4. Return the collected files to Technical Support.
5. **Revert every logging level back to default.**

> **Important:** `TraceOn`, `GeneralOn`, `OpcUaTraceOn` and the EDI / Diagnostics trace levels should only ever be enabled for the duration of testing, and disabled when testing is complete. They impact server performance.

***

## Raising the logging level

Sometimes the Server, Workstation and Middleware Server are all on the same computer, but often they are not. The technician you are working with will help identify which computer to pull logs from.

### TraceOn

Increases the logging level on the Command Centre Client, Command Centre Server and Configuration Client.

* Registry location (typical): `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher\Command Centre`
* Key: `TraceOn` (string). `0` = off, `1` = on.

![Registry Editor showing the TraceOn DWORD set to 1 under WOW6432Node\Gallagher\Command Centre](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-51db384a638e160e98b83d85581d02f3efbce9cf%2FSECHUB-CCS-DIAG-traceon-registry.png?alt=media)

The Trace setting takes effect as soon as it is applied. You do not need to restart services.

Alternative method: paste the following into a text file, rename it to `set trace.reg`, and run it:

```
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher\Command Centre]
"TraceOn"=dword:00000001
```

> **Important:** TraceOn should only ever be enabled (set to 1) for the duration of testing and disabled (set back to 0) when testing is complete.

### GeneralOn

Increases the logging level on the **Command Centre Server only**. It does nothing on Workstations. GeneralOn captures all interactions between the Command Centre Service and external systems / devices such as Controllers.

* Registry location (typical): `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher\Command Centre`
* Default value: `0` (off). Set to `1` to enable. Applied immediately, no service restart required.

![Registry showing the GeneralOn DWORD value](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-47316f4c0a4e20e1394e6fb6a75dffa64c571d7d%2FSECHUB-CCS-DIAG-generalon-registry.png?alt=media)

Older systems may hold these keys in slightly different locations depending on the age of the Command Centre system and operating system:

* `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher`
* `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CARDAX`
* `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Gallagher\Command Centre`
* `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\CARDAX\Command Centre FT`
* `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CARDAX\Command Centre FT\`

> **Important:** GeneralOn should only ever be enabled (set to 1) for the duration of testing and disabled (set back to 0) when testing is complete.

### LogFileCount

Controls how many historic Command Centre log files are kept in the logging folder.

* Default: `1`. **From version 8.90 this is already set to `10`.**
* Log location: `C:\ProgramData\Gallagher\Command Centre\Command_centre.log`

![Registry showing LogFileCount set to 10 and LogFileSize set to 10240](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-657c0360b4cc1a4fd7a55401dc40caf2967eb6de%2FSECHUB-CCS-DIAG-logfilecount-registry.png?alt=media)

The historic log is timestamped when the current `Command_centre.log` reaches its maximum file size (`LogFileSize`, 10 MB default), then a new one is started. If the file-count limit is exceeded, the oldest file is erased. Set this to 10 or more to capture more data over a longer period. Useful when enabling GeneralOn, or for issues that take significant time to replicate or happen at random.

The LogFileCount setting takes effect as soon as it is applied. You do not need to restart services.

![File Explorer at C:\ProgramData\Gallagher\Command Centre showing Command\_centre.log, the historic log, CCFTDump.log and the MiniDump folder](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-dab725a2abedceef8c31c6f8de6f63181f976fa4%2FSECHUB-CCS-DIAG-log-folder-programdata.png?alt=media)

### OpcUaTrace

Enables logging of OPC UA traffic on the server. Used for diagnosing OPC UA connection issues with Command Centre Workstations.

* Key: `OpcUaTraceOn`. Does not exist by default and must be created. Type: `DWORD (32-bit)`. Set to `1` to enable.
* Output: `opcua.log` added to the server log location (typically `C:\ProgramData\Gallagher\Command Centre`).

![Registry showing the OpcUaTraceOn DWORD set to 1](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-b70a435b3611786aa1438b147e6abf48fd275007%2FSECHUB-CCS-DIAG-opcuatrace-registry.jpg?alt=media)

Logging starts as soon as the key is set. You do not need to restart the services.

> **Important:** OpcUaTraceOn should only ever be enabled (set to 1) for the duration of testing and disabled (set back to 0) when testing is complete.

### Diagnostics service logging level

1. Stop the **Diagnostics** service.
2. Go to `C:\Program Files\Gallagher\Diagnostic Service\Bin\`.
3. Edit `Gallagher.Security.DiagnosticsService.appsettings.json`.
4. In the `"Logging"` → `"LogLevel"` section, change `"Default": "Information"` to `"Default": "Trace"` and save.
5. Restart the **Diagnostics** service.

### Middleware Framework Server

Enables debugging for external systems (usually third-party systems) that communicate with Command Centre through Middleware.

* Middleware default install directory: `C:\Program Files (x86)\Gallagher\FTCAPI\`
* Config file: `C:\Program Files (x86)\Gallagher\FTCAPI\Middleware Framework\FTCAPIRouterService.exe.config`

Find this commented-out section and uncomment it:

* Before: `<!--<add name="Debug" />-->`
* After: `<add name="Debug" />`

Save the file in the same folder (overwriting the original). Then restart the Middleware Service: open **Services** and restart the **FTCAPI Router Service**.

Middleware Framework Service logs are stored at: `C:\Program Files (x86)\Gallagher\FTCAPI\Middleware Framework\Log\`

### Elevator HLI logging

**Controller-based Lift HLIs.** Capturing the **Advanced → Additional Configuration** in a text file is better than a screenshot, because some items may not be clear in a screenshot.

![Controller Properties, Advanced tab, showing the lift HLI Additional configuration text box](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-d3730df80362e6998718d039abaa8554d06b6aba%2FSECHUB-CCS-DIAG-lift-hli-additional-config.png?alt=media)

For capturing purposes only, add the extra field `log_raw_data=1` to the Additional Configuration window. This logs events directly to the Controller's log file (on the controller) while the entry is set. Remove this setting when testing is complete.

> **Note:** Enabling `log_raw_data=1` significantly increases controller processing time, making the access decision time longer.

To capture controller logging events in the Command Centre logs, set `TraceOn` and `GeneralOn` in the server's registry (see above). Note that GeneralOn and TraceOn impact site server performance.

The alternative to enabling GeneralOn is to capture logs from the controller directly: run the latest **FTSupportTool** on the server with Web browsing enabled on the HLI Controller(s). Ensure other controllers do **not** have Web browsing enabled, or the FTSupportTool logs will be large and slow to run. On a busy site with `log_raw_data=1` set, controller logs fill quickly, so the tool would need to run every 5-10 minutes to capture them.

**Network-based Lift logging.** Where the Lift interface communicates with Command Centre over a network interface, capturing the network traffic between Command Centre and the lift system is often very helpful. Use the free software **Wireshark**.

***

## Workstation logging

### MSI-installed Workstation

Increases the logging level on the Command Centre Client, Command Centre Server and Configuration Client.

* Registry location (typical): `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Gallagher\Command Centre\`
* Key: `TraceOn`. `0` = off, `1` = on.

The Trace setting takes effect as soon as it is applied. No service restart required.

> **Important:** TraceOn should only ever be enabled (set to 1) for the duration of testing and disabled (set back to 0) when testing is complete.

### ClickOnce-installed Workstation

**Enable Trace Log:**

1. Open Registry and navigate to `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Gallagher\Command Centre`. If the location is not there, create it manually.
2. Create `TraceOn` with the value `1`.
3. Locate the log location at `C:\ProgramData\Gallagher\Command Centre`. If the folder is not there, create it manually. If logs are not created, grant the current user privileges on the folder.

**Enable ClickOnce logs** (these capture issues with the ClickOnce builder itself, for example startup issues). Enable Windows Deployment logging:

1. Open Regedit and go to `HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Windows\CurrentVersion\Deployment`.
2. Create two strings:
   * `LogVerbosityLevel` = `1`
   * `LogFilePath` = `C:\ProgramData\Gallagher\Command Centre\CommandCentreClick.log`

![Registry HKCU Deployment key showing LogFilePath set to CommandCentreClick.log and LogVerbosityLevel set to 1](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-c5d95f9b6e63c5d183cc99b8d5ec1cba335880cf%2FSECHUB-CCS-DIAG-clickonce-deployment-logging.jpg?alt=media)

Logs created on startup appear under `C:\ProgramData\Gallagher\Command Centre\`. If a workstation has an issue that needs the normal (Trace) logging, use the MSI install of the workstation and enable `TraceOn` there instead.

### Visitor Management Workstation logging

The Visitor Management Workstation (the blue interface) is a ClickOnce install with no fixed install location, so find the install path through Task Manager:

1. Open Visitor Management (only the login prompt needs to be open).
2. Right-click the taskbar → **Task Manager** → **Processes**.
3. Select `VMCABClient`, right-click → **Open File Location**.

![Task Manager with VMCABClient selected and Open file location highlighted in the right-click menu](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-64ba3a1f38094efd09f292e393de363721bc21f2%2FSECHUB-CCS-DIAG-vm-open-file-location.png?alt=media)

4. In that folder, open `VMCABClient.exe.config` in Notepad.
5. Find the rules line `<logger name="*" minlevel="Info" writeTo="VMClientLog"/>` and change `Info` to `Trace`: `<logger name="*" minlevel="Trace" writeTo="VMClientLog"/>`
6. Save (you may need to save to the Desktop and move it back if the file has write permissions on it).
7. Restart the Visitor Management Workstation for the higher logging level to take effect.

> **Note:** Once the trace level is no longer needed, revert `Trace` back to `Info`.

### EDI Trace logging

> ⚠️ **WARNING: For versions prior to 9.00, enabling this trace level will export Personal Information into the log file.**

To enable Trace logging in the Enterprise Data Interface, apply this registry key on the server in the Gallagher registry location:

* Key: `EILoggingLevel` (DWORD)
* Default: `3`. For diagnostics, set to `6`.

Once logging is complete, revert to `3` or delete the key.

> **Note:** The CCFT Service must be restarted for this to take effect. The logs are in the Completed or Failed folder.

***

## Collecting the logs

### Automated collection: Support Log Tool

For most logs, the **Support Log Tool** (SupportLogTool) collects everything when run on a Workstation, Middleware server or Command Centre Server.

Download: [SupportLogTool.zip](https://media.gallagher.com/m/680955e40a8820fa/original/SupportLogTool.zip)

1. Place the tool on the Workstation, Middleware server or Command Centre Server (the Desktop is a good location).
2. Expand the compressed folder.
3. Run `SupportLogTool` **as administrator**.
4. On the **Command Centre logs** tab, check the boxes you have been asked for:
   * **Include Minidump files**: if minidump folders have been requested.
   * **Include Controller Logs**: if controller logs have been requested. (First, in Configuration Client, go to the controller's Status and Overrides tab and enable WWW connections for 10 minutes so the tool can capture logs.)

![Support Log Collection Utility, Command Centre logs tab, showing Collect Logs and the Enable trace logging / Include Minidump files / Include Controller Logs checkboxes](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-86b433adc8eafc32c656264a521e4ed24ce7bf1b%2FSECHUB-CCS-DIAG-supportlogtool-cc-logs-tab.png?alt=media)

5. On the **Additional Config** tab, enter the Controller Diagnostic password if it has been changed from default (available from version 8.40+), and select any additional options requested (SQL Server performance info, PIV Information, Pending Changesets, Changesets).

![Support Log Collection Utility, Additional Config tab, showing the Diagnostic password field and additional-information checkboxes with a warning that the Changesets option can collect a large amount of data](https://328339335-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6bM8WhlBE9BYizPWJaPN%2Fuploads%2Fgit-blob-3d3421b7f481fca18a3ce7a7c461bdd32920bb39%2FSECHUB-CCS-DIAG-supportlogtool-additional-config-tab.png?alt=media)

> **Note:** Using the **Changesets** option can collect a large amount of data. Check with Technical Support before using it.

6. Click **Start** and let the tool run, then click **Collect Logs**.
7. Compress the folder(s) it generates in the SupportLogTool folder and return that file to Technical Support. Ensure the `FTSupportInfo.txt` file is included.

### Manual collection

If you do not want to use the automated tool, gather logs from these locations:

| Component                                           | Log location                                                              |
| --------------------------------------------------- | ------------------------------------------------------------------------- |
| Command Centre Client / Visitor Management Client   | `C:\Users\[windows user account]\AppData\Local\Gallagher\Command Centre\` |
| Command Centre Server / Configuration Client / REST | `C:\ProgramData\Gallagher\Command Centre\`                                |
| Middleware                                          | `C:\Program Files (x86)\Gallagher\FTCAPI\Middleware Framework\Log\`       |

The best approach is to ZIP the entire directory and return it to Technical Support.

***

## After collecting logs

> **Important:** Once fault replication is complete, revert every logging level you changed: `TraceOn`, `GeneralOn`, `OpcUaTraceOn` → `0`; EDI `EILoggingLevel` → `3`; Diagnostics service and VM logging → default; remove `log_raw_data=1`. Note the exact time the issue occurred so Technical Support can jump straight to it in the logs.

***

🔗 **Related**

* [Getting logs from a Controller](/knowledge-hub/products/cc-software/troubleshoot/command-centre-diagnostic-logs/command-centre-diagnostic-logs-getting.md). Web-browse and FTSupportTool controller-log methods.
* [Using CMtrace.exe to view logs](/knowledge-hub/products/cc-software/troubleshoot/command-centre-diagnostic-logs/using-cmtrace-exe-to-view-logs.md). A better viewer than Notepad for CC logs.
* [Create MiniDump in ClickOnce Command Centre / Configuration Client](/knowledge-hub/products/cc-software/troubleshoot/command-centre-diagnostic-logs/command-centre-diagnostic-logs-create.md). Producing a minidump on a ClickOnce client.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://help.security.gallagher.com/knowledge-hub/products/cc-software/troubleshoot/command-centre-diagnostic-logs/command-centre-diagnostic-logs-gatheri.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
