How to collect system logs in Windows OS platform.

Hi,
I'm using Microsoft Windows 2003 Server installed on Sun Fire X4250. Now I want to collect all the system logs files (Like explorer file on Solaris). What should I do ?
Thanks in advance.
BR,

Vutha wrote:
Hi,
I'm using Microsoft Windows 2003 Server installed on Sun Fire X4250.
Now I want to collect all the system logs files (Like explorer file on Solaris). What should I do ?
Thanks in advance.
BR,... perhaps go ask Microsoft whether such logs exist in their operating system.
If such logs exist, then Microsoft will know where they are located and whether there is a software tool comparable to Explorer.

Similar Messages

MacBook Pro (Early 2011) Freeze - How to collect system logs?

Hello,
My MacBook Pro (Early 2011) keep freezes at all times and hard reboot is only the available solution at. I'm having this problem from day one and spoke to AppleCare couple of times, but unable to resolve! Is there anyway to collect system logs from MacBook Pro running OS X Lion 10.7.2 to show it to Genius people at local Store?
Any help would be greatly appreciated! Thanks!

How to run hardware diagnostics for an Intel Mac
Boot from your original OS X Installer Disc One that came with your computer. After the chime press and hold down the "D" key until the diagnostic screen appears. Run the extended tests for a minimum of two or three hours. If any error messages appear note them down as you will need to report them to the service tech when you take the computer in for repair.
Some "common" error indicators:
SNS - sensor error
MEM - memory error
HDD - hard disk drive error
MOT - fan error

Tracking oracle database activities in security/system logs of windows server

Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
dhomya

Hi Dhomya,
I am not familiar with Oracle database, though you may try to enable file system auditing:
Audit object access
https://technet.microsoft.com/en-us/library/cc776774(v=ws.10).aspx
Apply or modify auditing policy settings for an object using Group Policy
https://technet.microsoft.com/en-us/library/cc757864(v=ws.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How to check system status from Windows command line?

Does anyone has an idea how to check system status from Windows command line? In UNIX we use startsap check, unfortunately I didn't find an appropriate command provided by SAP.
The only idea we have is to use
tasklist /FI "Username eq SAPService<SID>" | find "disp+work"
which isn't as nice as startsap check.

Hi,
In windows you can use the command
go to profile directory in command prompt and the give the following command to check the status of the instance.
sapstart check pf=START_DVEBMGS<nr>_<hostname>
that means you need to mention start profile or instance profile. So that it will say whether the instance is running or not.
If you want any other information please reply back to me.
Thanks,
Chaitanya.

Event IDs 136 and 137 0x80000000000000 in System Log on Windows 2008 R2 Server, Exchange 2010 in Cluster

Hi,
I'm having an issue with one of my exchange 2010 Servers. We had a power outage and upon recovery, I cannot start Services Net.Pipe Listener Adapter and Net.Tcp Listener Adapter (And thus cannot Start IIS and provide Exchange Client Services.) This is a
physical server (Not VMWare or Hyper-V)
The System event log has lots of Event 136's and 137s on Ntfs with the keyword - 0x80000000000000 - The General Messages are: The default transaction resource manager on volume C: encountered an error while starting and its metadata was
reset. The data contains the error code.
and
The default transaction resource manager on volume OS encountered a non-retryable error and could not start. The data contains the error code.
XML Output as follows:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Ntfs" />
<EventID Qualifiers="32772">136</EventID>
<Level>3</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated
SystemTime="2014-11-17T18:10:37.788942300Z" />
<EventRecordID>315532</EventRecordID>
<Channel>System</Channel>
<Computer>server.domain.com</Computer>
<Security />
</System>
- <EventData>
<Data />
<Data>C:</Data>
<Binary>1C00040002003000020000008800048000000000060019C000000000000000000000000000000000060019C0</Binary>
</EventData>
</Event>
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">137</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated
SystemTime="2014-11-17T18:10:37.788942300Z" />
<EventRecordID>315531</EventRecordID>
<Channel>System</Channel>
<Computer>server.domain.com</Computer>
<Security />
</System>
- <EventData>
<Data />
<Data>OS</Data>
<Binary>1C0004000200300002000000890004C000000000020100C000000000000000000000000000000000020100C0</Binary>
</EventData>
</Event>
When I attempt to start the services - I get the following errors:
The Net.Pipe Listener Adapter service depends on the Windows Process Activation Service service which failed to start because of the following error:
Transaction support within the specified resource manager is not started or was shut down due to an error.
The Net.Pipe Listener Adapter service depends on the Windows Process Activation Service service which failed to start because of the following error:
Transaction support within the specified resource manager is not started or was shut down due to an error.
I have tried the "fsutil resource setautoreset true" fix without success.
Any ideas or direction would be much appreciated. Restoring this server will be extremely difficult.
Thanks!

We can close this question.
From an elevated prompt, I ran 'fsutil resource setautoreset true' and attempted to remove the files with .blf and regtrans-ms file extensions from C:\Windows\System32\config\TxR. but these files were locked by system processes. (They are also
tagged with the hidden file attrib so you may not see them at first)
So, I booted the system with a Windows 2008 R2 Install Disk, selected repair OS and selected the command prompt. I then performed a chkdsk /f c: and selected "Y" to unmount the drive. It made some repairs.
With the system booted from the install disk, and chkdsk executed, the locks were freed and I was able to delete the files from C:\Windows\System32\config\TxR.
Once the system rebooted, the services came back fine and everything was back to normal.

How to collect debug logs for custom module only in EBS by AppsLog.write?

Hi,
Customer is trying to retrieve logs for their custom module (XXKCZ) and
put it to /log/kcz.log by using AppsLog.write() method. (refer to sample code below)
Customer has set these profile values in the application level and removed the values
in the site level. But the file /log/kcz.log is created but does not have any lines in it.
Is there something wrong to the coding of AppsLog.write?
Application Name "xxkcz"
　FND: Debug Log Enabled "Y"
　FND: Debug Log Module "xxkcz%"
　FND: Debug Log Level "UNEXPECTED"
　FND: Debug Log Filename "/log/kcz.log"
　---- [Sample Code starts] ----
　Package jp.kaikei.oracle.apps.xxkcz.util.server;
　import oracle.apps.fnd.common.AppsContext;
　import oracle.apps.fnd.common.AppsLog;
　import oracle.apps.fnd.common.Log;
　public class CommonLog{
　public void initLog() {
　AppsContext appsCtx = new AppsContext();
　AppsLog appsLog = appsCtx.getAppsLog();
　appShortname = "xxkcz"
　message ="Message started"
　CLASS_NAME = "jp.kaikei.oracle.apps.xxkcz.util.server.CommonLog";
　String moduleName = appShortName + "." + CLASS_NAME + ".initlLog;
　appsLog.write(moduleName, message, Log.UNEXPECTED)
　---- [Sample Code ends] ----
Any advise?
Thanks.

May be some initialization is missing,
I have created my own writetoFile method,
if you want you can try this,
* Method to write the debug messages into a File
public void writeFile(String debugMsg, String userName)
String logDir = (String)this.getOADBTransaction().getProfile("XXPO_OA_PDT_PDT_DEBUG_DIR");
BufferedWriter out;
//DateFormat dateFormat = new SimpleDateFormat("dd-MM-yyyy HH:mm:ss");
Date date = new Date();
// if(logDir ==null)
// logDir = "/ebsgld/ebsgldcomn/temp/";
String fileName = logDir+userName+"-pdt_log.log";
//createDiag(XXPO_APP_SHORT_NAME,"[AM]fileName "+fileName);
try
out = new BufferedWriter(new FileWriter(fileName,true));
out.write("\n\n" + debugMsg);
out.close();
} catch (IOException e)
//System.out.println("exception in Writing the log file "+e.toString());
//createDiag(XXPO_APP_SHORT_NAME,"[AM] Exception in Writing the log file "+e.toString());
//Only start and end file
if(debugMsg.indexOf("##########")!=-1)
String impFileName = logDir+userName+"-pdt_imp_log.log";
// System.out.println("File Name is "+fileName);
try
out = new BufferedWriter(new FileWriter(impFileName,true));
out.write("\n\n" + debugMsg);
out.close();
} catch (IOException e)
createDiag(XXPO_APP_SHORT_NAME,"[AM] exception in Writing the log imp file "+e.toString());
With regards,
Kali.
OSSI.

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Can database activities of creating or dropping tables/packages be tracked in the security/system logs

Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?

2765539 wrote:
Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Your first question is easy, you configure audit to log to the OS audit trail with
alter system set audit_trail=os scope=spfile;
and then enable audit for whatever actions you want to capture. All documented in the Security Guide.
Your second question makes no sense unless you explain what you mean by "oracle log".

Unable to read system log details using SXMI_XMB_SYSLOG_READ

Hi All,
I want to access system log contents of SAP system in my java application by calling RFC SXMI_XMB_SYSLOG_READ. I am able to execute this RFC successfully but it is returning only one line as
'System Log: Local Analysis of <Machine name>                    1'
Please guide me on how to retrieve system log contents using this RFC or is their any alternative way to accomplish this?

Hi All,
Below is java code i am using for calling SXMI_XMB_SYSLOG_READ function module.
Date stDate = new Date(02, 9, 2009);
JCO.Function Function_SXMI_XMB_SYSLOG_READ;
               IFunctionTemplate ft =
                    mRepository.getFunctionTemplate("SXMI_XMB_SYSLOG_READ");
               if (ft != null) {
                    Function_SXMI_XMB_SYSLOG_READ = ft.getFunction();
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         "vijay",
                         "EXTERNAL_USER_NAME");
                    //                    Function_SXMI_XMB_SYSLOG_READ
                    //                         .getImportParameterList()
                    //                         .setValue(
                    //                         "ps4909",
                    //                         "SERVER_NAME");
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         stDate,
                         "FROM_DATE");
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         "11:03:19",
                         "FROM_TIME");
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         stDate,
                         "TO_DATE");
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         "12:58:00",
                         "TO_TIME");
                    Function_SXMI_XMB_SYSLOG_READ
                         .getImportParameterList()
                         .setValue(
                         "X",
                         "PARA_RECS");
                    mConnection.execute(Function_SXMI_XMB_SYSLOG_READ);
                    JCO.Table tableSYSLOG_TBL =
                         Function_SXMI_XMB_SYSLOG_READ
                              .getTableParameterList()
                              .getTable(
                              "SYSLOG_TBL");
                              System.out.println(tableSYSLOG_TBL.getNumRows());
                    for (int i = 0; i < tableSYSLOG_TBL.getNumRows(); i++) {
                         for (int j = 0; j < tableSYSLOG_TBL.getNumColumns(); j++) {
                              System.out.println(
                                   tableSYSLOG_TBL.getName(j)
                                        + "\t\t"
                                        + tableSYSLOG_TBL.getValue(j));
and i am getting same line stated below repeatedly as output
LINE                                System Log: Local Analysis of ps4909                    1

System Log Error Msgs

Hi
How to check System Log for error messages in BI 7.0

Hi,
T-code to see system logs is : SM21.
Go through following links which are helpful.
http://help.sap.com/saphelp_nw04s/helpdata/en/c7/69bcbaf36611d3a6510000e835363f/frameset.htm
/thread/321122 [original link is broken]
Thanks and Regards,
Ramki.

About System logs

Hi.
How to see system logs at OS level ?

Hi Narendra ,
please go through this link.
http://www.sap-img.com/basis/useful-sap-system-administration-transactions.htm
or go through the
AL01 SAP Alert Monitor
AL02 Database alert monitor
AL03 Operating system alert ... Update Program Administration
SM21 System log
SM23 System Log Analysis
cheers
Mohinder Singh Chauhan

How to write messages into system log(sm21) using c_write_syslog_entry

Hi,
May i know how to write my application messages into system log(sm21)
using "c_write_syslog_entry". Any explanation regarding the Type. ID, Data
will be useful with examples. Incase of any other FM's or C functions does
the same Please let me know.
Thanks
Prasath

Hello Prasanth
I agree with Kareem that you should prefer the application log. If interface IF_RECA_MESSAGE_LIST is available on your SAP system this is the first choice for collecting messages AND storing them as application log.
For an example you may have a look at my Wiki posting [Message Handling - Finding the Needle in the Haystack|https://wiki.sdn.sap.com/wiki/display/profile/2007/07/09/MessageHandling-FindingtheNeedleintheHaystack]
Not shown in this example is the storage of the application log. However, if you look at method CF_RECA_MESSAGE_LIST=>CREATE you see that you can add the application log references here.
Regards
Uwe

How do we do Archiving the system logs in SAP-BW

Hi All
How do we do Archiving the system logs in SAP-BW.
Can anyone will let me know reagrding this
If you have any docs also pls forward to my id [email protected]
Thanks & Regards
Balji

Balaji,
What is the landscape you have ?
Windows / Unix / Solaris etc ?
Also there are a lot of logs that are generated:
Archive log ,
System Log,
Transaction log etc...
The usual procedure is to copy them into another location and then delete the original file , the system will usually recreate the log and start logging new entries..
Arun
Hope it helps...

How to read system eventlog using java program in windows?

How to read system eventlog using java program in windows?
is there any java class available to do this ? or any one having sample code for this?
Your friend Zoe

Hi,
There is no java class for reading event log in windows, so we can do one thing we can use windows system 32 VBS script to read the system log .
The output of this command can be read using java program....
we can use java exec for executing this system32 vbs script.
use the below program and pass the command "eventquery"
plz refer cscript,wscript
import java.io.*;
public class CmdExec {
public static void main(String argv[]) {
try {
String line;
Process p = Runtime.getRuntime().exec("Command");
BufferedReader input =
new BufferedReader
(new InputStreamReader(p.getInputStream()));
while ((line = input.readLine()) != null) {
System.out.println(line);
input.close();
catch (Exception err) {
err.printStackTrace();
This sample program will list all the system log information....
Zoe

How to collect provider's system channel

My driver uses ETW to log some error messages to System channel.
When collecting the traces from my provider with logman I see messages from all channels including System channel.
When enable tracing with Message Analyzer I see only not-imported channels defined in my driver's manifest.
How to enable system channel collecting with Message Analyzer?

I tried different configurations and found the issue is not with System channel. The issue is with collecting events on any channel with empty template declared or without template declared (no parameters provided).
For example:
<event symbol="EvtDeviceAdd_Start" value="1021" version="0" channel="System" level="win:Informational" opcode="win:Start" template="Tmpl_Empty" message="$(string.event.1021.message)"/>
<template tid="Tmpl_Empty"/>
<string id="event.1021.message" value="DeviceAdd Start"/>

How to collect system logs in Windows OS platform.

Similar Messages

Maybe you are looking for