The endpoint agent’s log files are the primary source for agent health and status information. The log files are kept locally on the endpoint, but they can easily be forwarded to the backend with the uberAgent Log Collector Splunk App.

Please refer to the log collector’s documentation for details.