Log Storage Location - Elastic Defend Logs macOS

Hey @marmai16. Defend buffers events locally to Endpoint/state/documents. The files are in an internal/opaque format and not intended to be consumed by anything but Defend. The format may change at any time.

2 Likes