End-of-Life (EoL)

Troubleshooting Resources for Mac

Refer to the following troubleshooting resources for the Cortex® XDR™ agent for Mac.
Resource
Description
Processes
Launch Daemons:
  • /Library/Application Support/PaloAltoNetworks/Traps/bin/pmd
  • /Library/Application Support/PaloAltoNetworks/Traps/bin/authorized
  • /Library/Application Support/PaloAltoNetworks/Traps/bin/trapsd
Launch Agents:
  • /Library/Application Support/PaloAltoNetworks/Traps/bin/Cortex XDR Agent.app/Contents/MacOS/Cortex XDR Agent
  • /Applications/Cortex XDR.app/Contents/MacOS/Cortex XDR
System Extensions:
  • com.paloaltonetworks.traps.securityextension
  • com.paloaltonetworks.traps.networkextension
Cortex XDR agent console log
Indicates information, warnings, and errors related to the agent console. The Console log is located in the following folder on the endpoint:
  • Mac OS X 10.10 and OSX 10.11—
    /var/log/traps/agent/
  • macOS 10.12 and later releases—View logs from the Console application in
    /Library/Logs/PaloAltoNetworks/Cortex XDR/
    .
Cortex XDR agent service log
Indicates information, warnings, and errors related to Cortex XDR. The Service log is located in the following folder on the endpoint:
  • Mac OS X 10.10 and OSX 10.11—
    /var/log/traps/
  • macOS 10.12 and later releases—View logs from the Console application in
    /Library/Logs/PaloAltoNetworks/Cortex XDR/
    .
Supervisor Command Line Tool (cytool)
Allows you to manage agent features and perform advanced troubleshooting on the local endpoint from a command line interface. For more information, see Cytool for Mac.

Recommended For You