# ISC sail.exe CLI not pulling logs or data from VA

**URL:** <https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348>\
**Category:** SHF Discussion and Questions\
**Tags:** cli, sailpoint-identity-security, virtual-appliance\
**Created:** [May 6, 2025, 5:10pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348 "2025-05-06T17:10:06Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![srelliott](https://avatars.discourse-cdn.com/v4/letter/s/a183cd/32.png) [@srelliott](https://developer.sailpoint.com/discuss/u/srelliott)\
**Post date:** [May 6, 2025, 5:10pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/1 "2025-05-06T17:10:06Z")

</div>

I am using [Command Line Interface | SailPoint Developer Community](https://developer.sailpoint.com/docs/tools/cli)

I can list VA’s in both sandbox and production. But I can only download va logs in sandbox. When I attempt to download a log from one of the production VA’s, it prompts for password, sits for a minute and doesn’t download anything. I’ve verified the PAT is sp:scopes:all in both dev and prod. Do I need to enable something in the SaaS or the VAs? I can get the logs via ssh and using stunt.

This is what happens when I run in production:

C:\SailPoint ISC CLI\bin\>sail va collect xyz.xyz.xyz.xyz -l  
Please enter the password for xyz.xyz.xyz.xyz  
2025/05/06 09:43:27 INFO Starting File Collection VA=xyz.xyz.xyz.xyz

C:\SailPoint ISC CLI\bin\>

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [May 6, 2025, 5:13pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/2 "2025-05-06T17:13:23Z")

</div>

have you tried just collecting log files using

sail va collect vahost -l

using -l flag?

---

<div class="post-metadata">

**Author:** ![srelliott](https://avatars.discourse-cdn.com/v4/letter/s/a183cd/32.png) [@srelliott](https://developer.sailpoint.com/discuss/u/srelliott)\
**Post date:** [May 6, 2025, 5:40pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/3 "2025-05-06T17:40:26Z")

</div>

Thanks for the response. If you look at the command line text, you’ll see that I did what you’re asking. or are you asking something else? Maybe I should’ve highlighted that command.

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [May 6, 2025, 5:56pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/4 "2025-05-06T17:56:08Z")

</div>

my bad, for me, its not even working in sandbox ☹

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [May 6, 2025, 6:21pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/5 "2025-05-06T18:21:05Z")

</div>

BTW, what version are you using?

---

<div class="post-metadata">

**Author:** ![srelliott](https://avatars.discourse-cdn.com/v4/letter/s/a183cd/32.png) [@srelliott](https://developer.sailpoint.com/discuss/u/srelliott)\
**Post date:** [May 6, 2025, 6:32pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/6 "2025-05-06T18:32:40Z")

</div>

Version 2.2.3 on Windows

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [May 7, 2025, 9:11am UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/7 "2025-05-07T09:11:21Z")

</div>

I tried the same at the setup I’m currently using. Please be sure that 1) you can reach the VA from the machine your are connecting to and 2) you enter the proper password of the ‘sailpoint’ user.

For my setup, I needed to have a connection to the VPN in order to be in the same network segment.

The CLI doesn’t give you any error message when trying to connect and collect, either because it cannot find the machine or you have entered the wrong password.

---

<div class="post-metadata">

**Author:** ![srelliott](https://avatars.discourse-cdn.com/v4/letter/s/a183cd/32.png) [@srelliott](https://developer.sailpoint.com/discuss/u/srelliott)\
**Post date:** [May 8, 2025, 2:46pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/8 "2025-05-08T14:46:58Z")

</div>

Thanks for the response. I can ping the VA’s from the Windows system, what ports are you thinking need to be opened? The password is good, it’s a copy paste situation. I’m working within my network environment. Again, I can pull logs from DEV, just not prod. I am able to do a listing of VAs in both dev and prod.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 7, 2025, 2:47pm UTC](https://developer.sailpoint.com/discuss/t/isc-sail-exe-cli-not-pulling-logs-or-data-from-va/125348/9 "2025-07-07T14:47:29Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
