IIS 5 & IIS 6
IIS logs missing in the default location
Last post Feb 04, 2009 04:48 PM by Sam964
Feb 04, 2009 09:06 AM|Sam964|LINK
For some reason, IIS logs are missing in the default logfile directory location (c\WINDOWS\system32\LogFiles\W3SVC2). This is related to IIS 6.0. Is there a way to troubleshoot this issue? I have done manual testing of the website and also ran some automated
tests to generate the requests. The Server is giving responses, but I am unable to find a single log file. Can someone please help me troubleshoot this issue?
Thanks a lot.
Feb 04, 2009 10:59 AM|Paul Lynch|LINK
Is the web site definitely configured to log to that location in IIS ? When you browse as part of your manual testing are you 100% sure that you are hitting that particular web site ?
If a site is configured to log to a particular location and you are hitting that site with traffic it will log that activity to disk once the 64k buffer is full.
Feb 04, 2009 11:03 AM|t-gemcgr|LINK
If you search for "LogFileDirectory" in the metabase.xml (%windir%\system32\inetsrv) is there an Entry? It will be under IISWebService header ( there maybe other log entries with regards to smtp but just ignore these )
Feb 04, 2009 03:50 PM|Sam964|LINK
I shud have mentioned that in the posting. It does have an entry. It also shows up when I use the IIS Manager. But log files fail to be in the specified directory.
Feb 04, 2009 03:51 PM|Sam964|LINK
I tried to verify it with fiddler that it is hitting the right machine. I ran 1000 requests many times. That shud have been sufficient to fill the buffer.
Feb 04, 2009 04:48 PM|Sam964|LINK
Thanks for you help. I tried to investigate this more and started looking at the IIS metabase settings and there were two settings which got corrupted. One is the LogType setting (parent node) and the other one is the DontLog setting (on the child node).
Both were set to 0 and true respectively which was causing the issue. The weird thing was IISManager wasn't showing that and it lead me to believe that the settings did apply, but they weren't for some reason.
Thanks once again guys. I appreciate your help.