Tag: logfiles
-
Monitoring your fleets event logs – Part 2
Install Splunk – It’s free! https://www.splunk.com/en_us/download/splunk-enterprise.html Modify Program Files\Splunk\etc\system\local\inputs.conf Add the lines [WinEventLog] evt_resolve_ad_obj = 1 Then we need to reboot splunk, in Splunk click Settings, then Server controls and click Restart Splunk Next we need to add our data source, click Add Data from the launch screen, then monitor Choose Local Events then ForwardedEvents and…
-
Monitoring your fleets event logs – Part 1
Windows has an amazing feature that let’s you collect logs from remote computers, it’s called Windows Event forwarding and is pretty easy to set up. Once we have this data we can use free tools such as Splunk or GrayLog to analyse the data, find patterns, fix. Below is the way to get started collecting…
-
/
Application Catalog logs
There are 2 operational logs for the App Catalog server side. <Drive Letter>SMS_CCMCMApplicationCatalogLogsServicePortalWebSite.log <Drive Letter>SMS_CCMCMApplicationCatalogSvcLogsServicePortalWebService.log Troubleshooting If the App catalog has an error message “Cannot Connect to the Application Server” this is referring the to the ServicePortalWebService.log. So far I have only seen the error: error: WriteHeadersCallback(WebExceptionStatus errorStatus, ConnectStream stream, Boolean async) in the…
-
/
Powershell script to clean up IIS’s log file mess
Management Point’s rely heavily on IIS and IIS loves to log a lot which will fill up your hard drive. Here’s a script that deletes logs older than 14 days. Location and amount of days can be changed easily. We have ours scheduled to run monthly on site systems using IIS. Download