Accessing IIS Exchange 2010 Throttling Logs (Budget Snapshots) - iis

I'm trying to monitor my EWS app's resource utilization of our Exchange 2010 SP3 server on a Windows Server 2012 R2 instance. I have a decent understanding of the throttling policies, but am not sure where to find the budget snapshots outlined in this article:
A few components (Outlook Web App, EAS, and EWS) log budget snapshot information to the IIS logs. EWS, notably, includes both a start and an end snapshot. Here is an example of an IIS log entry for EWS (lines are broken up to make it more readable):
2010-03-09 15:15:12 XX.XXX.XX.X POST /ews/Exchange.asmx
;RC:bfe35012-30fd-499e-90d6-552d0ca89fab;
Init>>Conn:0,AD:30000/30000/0%,CAS:54000/54000/0%,AB:30000/30000/0%,RPC:36000/36000/0%,FC:1000/0,Hash:14366112,Sub:20/0;
SoapAction=m:GetDelegate;Version=1;RpcC=14;RpcL=687;LdapC=0;LdapL=0;
End(17156.25ms)>>Conn:3,AD:30000/30000/0%,CAS:54000/36907/28%,AB:30000/30000/0%,RPC:36000/35985/0%,FC:1000/0,Hash:14366112,Sub:20/0;
443 Domain\User XX.XX.XXX.XX - 200 0 0 17468
It seems that these logs contain the information I need to be able to monitor our EWS app's performance and see how close it is to being throttled. I haven't been able to find any other throttling related logs, other than these, but I don't know the path to these. I've checked the IIS logs at %SystemDrive%\inetpub\logs\LogFiles and have turned on the throttling related diagnostics logs in the Exchange Management Console and tried to look at them in the Event Viewer, but didn't have any success.
Any assistance would be greatly appreciated, thank you!

I'd suggest you have a read of https://blogs.technet.microsoft.com/karywa/2016/07/15/exchange-server-20132016-ews-logging-configuration/ . Depending on the update version your running the default location should be \ExchangeInstallPath\V15\Logging\EWS on the CAS server that is processing the EWS requests.

Related

making new web application in sharepoint foundation 2013

I have made a new web application on sharepoint foundation 2013 using the steps mentioned in link below.But when i try to access it using both server and client i get the message "401 UNAUTHORIZED".what to do?
http://sharepointgeorge.com/2012/create-web-application-site-collection-sharepoint-2013-preview/
I made it on a client pc having rights of administrator.I have tried quite a few thing by changing iis settings but this problem is not getting solved.Any help would be greatly appreciated.
Do you have kerberos enabled in this environment? If it's not configured correctly, this behavior can happen. You might check your logs to see if there is any additional information.

Sitecore crashing application pool when using Security Editor on a specific role

Starting today, whenever I try and use security editor on either of two similar roles I get a timeout. If I try again IIS reaches an error threshold of some kind and stops that Application Pool. Then all of our users receive a "Service Unavailable" message from IIS.
I can edit other roles. This error can be recreated.
I assume I have some kind of database corruption, but I can't find an error that helps me in Event Viewer or the Sitecore logs. Where else can I look for more detail?
IIS6, Windows Server 2003, Sitecore 6.2
It sounds to me like you've got a circular reference in your roles.
Are you using the default role provider, ASP.NET membership? If so, try using the default Microsoft security tools (you can get at 'em via Visual Studio). If that doesn't work, you can programmatically modify these roles using the API.
Also, I believe there is a known issue which may be fixed in a 6.2.x update. I would check the change list at SDN. Here: http://sdn.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%206/ReleaseNotes/ChangeLog.aspx
Yep... take a look at the 6.2.0 rev 100701 update list.

What is causing calls to sharepoint server vti_bin\sites.asmx

We are looking at logs on our sharepoint and see a call to this web service from several PC's.
The calls apprear very regular every 5 mins, when the PC is on.
Anyone know what is causing this?
Edit
The agent in the iis log is: Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+HO32602;+HO32600;+HO32501;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727)
In addition to the above (which is likely) it could be one of the desktop search products that MS has created.
Maybe:
Office
Workspace/Groove sync
Some custom client application
SharePoint Designer
Browser
Whats the user agent reported in the logs?

SharePoint 2010 error not found in logs, how to configure logging?

We have a SharePoint 2010 feature that works fine on my development machine, but won't activate on the staging system. It's SiteCollection scoped, the containing solution was successfully deployed on one WebApplication.
When we try to activate the feature, we get an error message with a Correlation ID. But we can't find this ID or the name of the feature in the SharePoint Logs nor in the Windows Event Log.
Maybe logging wasn't configured right or there is an error with ULS on the machine, but we haven't changed the SharePoint Logging options from the state they were after installation. Where can I find exception / error messages that happen in ULS? How must Logging be configured to allow the failed feature activation to be logged?
Under SharePoint 2010, go to Central Administration. There is a Monitoring link. Click there and under reporting is a Configure Diagnostic logging link. If you set the Least Critical event to Trace and Least Critical Event items to verbose, you should get more information in the SharePoint log files. Make sure you switch back though after diagnosing because the process is chatty and can result in extra IO and large files.
Out of the box, I don't believe logging is set. You can also verify the location of the log files to make sure they are not on setup elsewhere on this page.
More information at TechNet
Download the ULS Viewer tool from here: link text and filter by the correlation ID.
This is an old post, but if soone gets the same problem, please try the following:
Check who is your farm account user (the user under which SharePoint Timer Service is running).
Add this user to local administrators
Restart Timer Service.
Please mark this as answer if my solution works for you.
You can always get information from the logs from all servers in the farm using the Merge-SPLogFile cmdlet. The example below filters on a correlation ID, but there are more filter options (tip: Get-Help Merge-SPLogFile -Full).
$corrID="some correlation id"
Merge-SPLogFile -Path "path to output file" -Correlation $corrID
It is worth emphasizing that the OP's substantive question,
Where can I find exception / error messages that happen in ULS?
is answered by the OP himself in a comment to #noebierzo,
I found the log entry ... by checking all log files on all front-end
servers.
So be aware if you have a multi-server farm; look at all servers in the farm when checking or searching for errors and trace log messages.
Fortunately Microsoft recently released an updated ULS Viewer v16.0.3129.1000 that provides basic multi-server aggregation of the trace logs. Bill Baer, Senior Technical Product Manager for SharePoint at Microsoft has a nice blog post on the new version which outlines this feature.
The new version of ULS Viewer is available from the Microsoft Download Center. Note that this version of ULS Viewer requires at least .NET 4.0 which your SharePoint 2010 farm may or may not have installed. Bill blogs about this but doesn't comment on the impact of installing .NET 4.0 on your SharePoint 2010 farm.
If you want the old version of ULS Viewer v2.0.3530.27850 that only requires .NET 2.0 you can no longer count on Microsoft as they took down the Archive Gallery where it used to live. Fortunately a few people have posted it online, include Benjamin Athawes on his blog.
Given the .NET version dependency, and the fact that SharePoint 2010 is still a supported product, Microsoft really should keep an official link around for this prior version ULS Viewer. Suggest you ask Bill about this on his blog. Perhaps SharePoint 2010 SP2 is fully supported side-by-side with .NET 4.0, it would be good to know.

Intermittent Issues with Excel Services web parts

We have a brand new SharePoint 2007 Intranet farm running on new 64-bit hardware with lots of processor and memory. We are using Kerberos for security and have carefully followed all the written guidance from Microsoft and blogs to configuring Kerberos and Excel Services correctly. Generally everything is running great.
Currently we can add Excel Web Access web parts on SharePoint team site pages and connect them up to SQL 2005 Analysis Cubes for use with doing Pivot Tables, Graphs, etc... As part of this, we have created a test dashboard page that has six of these web parts that display upon page load. However we have noticed that we get intermittent errors when a user does things like refresh the connection or workbook, or change the filter on PivotTables. The user gets a generic error messages such as "An error has occurred. Please contact an administrator." and then their session in Excel Services is hosed up. They have to shut down IE and come back to the site in order to interact successfully with the Excel web parts again.
I have looked at the logs but just see generic messages like "EcsSoapException: An error has occurred." that don't give me something that I can really act on. Also I have checked the application event logs but didn't find anything relevant.
Any ideas on how to troubleshoot this?
It turns out this is a bug with Kerberos in Windows 2008. Microsoft has just released a hotfix for this (see link below). The hotfix completely resolved all my issues.
http://support.microsoft.com/kb/969083

Resources