I can list VA’s in both sandbox and production. But I can only download va logs in sandbox. When I attempt to download a log from one of the production VA’s, it prompts for password, sits for a minute and doesn’t download anything. I’ve verified the PAT is sp:scopes:all in both dev and prod. Do I need to enable something in the SaaS or the VAs? I can get the logs via ssh and using stunt.
This is what happens when I run in production:
C:\SailPoint ISC CLI\bin>sail va collect xyz.xyz.xyz.xyz -l
Please enter the password for xyz.xyz.xyz.xyz
2025/05/06 09:43:27 INFO Starting File Collection VA=xyz.xyz.xyz.xyz
Thanks for the response. If you look at the command line text, you’ll see that I did what you’re asking. or are you asking something else? Maybe I should’ve highlighted that command.
I tried the same at the setup I’m currently using. Please be sure that 1) you can reach the VA from the machine your are connecting to and 2) you enter the proper password of the ‘sailpoint’ user.
For my setup, I needed to have a connection to the VPN in order to be in the same network segment.
The CLI doesn’t give you any error message when trying to connect and collect, either because it cannot find the machine or you have entered the wrong password.
Thanks for the response. I can ping the VA’s from the Windows system, what ports are you thinking need to be opened? The password is good, it’s a copy paste situation. I’m working within my network environment. Again, I can pull logs from DEV, just not prod. I am able to do a listing of VAs in both dev and prod.