Understanding http log

Hi,
I know that the doc did specify a very high level of understanding the log:
dateTime hostName processName[pid]: category logLevel: eventMessage
However I have couple of questions here:
Q1) Why is there different IP addresses shown? 129.2.20.19 is the load balancer and 136.14.130.21 is from PC.
Q2) What is the difference between the 2 time stamps, one at the beginning and one at the end of each entry?
Example: ..03/Jun/2005:14:58:00....14:56:57 0:01:03.....
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/6/3 14:58:00 0:00:00 19 149 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [192.168.48.109] [unauthenticated] 2005/6/3 14:58:00 0:00:00 623 262 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [136.14.130.21] [unauthenticated] 2005/6/3 14:56:57 0:01:03 1330 604 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]: Account Notice: close [136.14.130.21] [unauthenticated] 2005/6/3 14:56:56 0:01:04 2435 3698 0

Hi,
I know that the doc did specify a very high level of
understanding the log:
dateTime hostName processName[pid]: category
logLevel: eventMessage
However I have couple of questions here:
Q1) Why is there different IP addresses shown?
129.2.20.19 is the load balancer and 136.14.130.21
1 is from PC.The ip is the address of the system that connected. It's reporting that. If one of your users connected directly, then his ip is reported. We must know the ip where the connection is happening, if we're going to have ip security.
Q2) What is the difference between the 2 time stamps,
one at the beginning and one at the end of each
entry?Login time vs log out time? I'm not exactly sure, myself.
Why is this important to you? The timestamp on the left is the logout time.
>
Example: ..03/Jun/2005:14:58:00....14:56:57
0:01:03.....
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [129.2.20.19] [unauthenticated]
2005/6/3 14:58:00 0:00:00 19 149 0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [192.168.48.109]
[unauthenticated] 2005/6/3 14:58:00 0:00:00 623 262
0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [136.14.130.21]
[unauthenticated] 2005/6/3 14:56:57 0:01:03 1330 604
0
[03/Jun/2005:14:58:00 +0800] mux1 httpd[10763]:
Account Notice: close [136.14.130.21]
[unauthenticated] 2005/6/3 14:56:56 0:01:04 2435 3698
0

Similar Messages

Using API mbean for HTTP Logging - WebServerLogMBean

I have been trying to configure http logging using API MBEANS. For some reason, the values are not being passed along.
I am using WLST to call a .py to configure the values. For the general logging, it works without issue.
Also, along the same format, how can logging be adjusted for the admin logs.
Version WL: 10
****SCRIPT*****
import weblogic.management.configuration.LogMBean as LogMBean
import weblogic.management.configuration.WebServerLogMBean as WebServerLogMBean
# This section creates the Log MBean and configures it for log rotation.
create(managedServerName, 'Log')
cd('Log/' + managedServerName)
cmo.setRotationType(LogMBean.TIME)
cmo.setFileName('logs/' + managedServerName + '.log')
cmo.setFileCount(25)
# This section creates the WebServer Log MBean and configures it for log rotation. HTTP LOGGING
cmo.setRotationType(WebServerLogMBean.TIME)
cmo.setFileCount(15)
cmo.setLogFileFormat(extend)
cmo.setELFFields("c-ip date time cs-method cs-uri sc-status bytes time-taken")
*****END OF SCRIPT*****
Any help is appreciated.
Edited by woodalla at 06/09/2008 11:25 AM

Can you provide more info on what the problem is? What do you mean by
the values are not being passed along?
Andrew Woodall wrote:
I have been trying to configure http logging using API MBEANS. For some reason, the values are not being passed along.
I am using WLST to call a .py to configure the values. For the general logging, it works without issue.
Also, along the same format, how can logging be adjusted for the admin logs..
Version WL: 10
****SCRIPT*****
import weblogic.management.configuration.LogMBean as LogMBean
import weblogic.management.configuration.WebServerLogMBean as WebServerLogMBean
# This section creates the Log MBean and configures it for log rotation.
create(managedServerName, 'Log')
cd('Log/' + managedServerName)
cmo.setRotationType(LogMBean.TIME)
cmo.setFileName('logs/' + managedServerName + '.log')
cmo.setFileCount(25)
# This section creates the WebServer Log MBean and configures it for log rotation. HTTP LOGGING
cmo.setRotationType(WebServerLogMBean.TIME)
cmo.setFileCount(15)
cmo.setLogFileFormat(extend)
cmo.setELFFields("c-ip date time cs-method cs-uri sc-status bytes time-taken")
*****END OF SCRIPT*****
Any help is appreciated.
Edited by woodalla at 06/09/2008 11:25 AM

In HTTP log: Store Critical: Unable to read index file for user/ uid

All:
Sun Java(tm) System Messaging Server 6.2-7.05 (built Sep 5 2006)
libimta.so 6.2-7.05 (built 12:18:44, Sep 5 2006)
We recently have started to see the following errors in our http logs:
[01/Mar/2007:13:03:43 -0500] httpd[5174]: Store Critical: Unable to read index file for user/<uid>: System I/O error. Administrator, check server log for details.
It's occurring a couple of different times during the day to certain users. Then it won't happen for days to anyone, but then start up again. I saw a similar thread to this re: IMAP and I'm curious if http could be having the same problem. We increased the number of process of http (from 2 to 4 a few months ago) but kept the same maxsessions (6000), so maybe I need to change the maxsession to something lower? We only started to see the I/O error two weeks ago We're not seeing the error in imap logs. Also there's no errors in the default log related to the users that receive this in http.
I'm planning on running a reconstruct -m in the mean time to see if that helps. There have been no changes to the server or application for quite some time. Any thoughts?

Yes, http can have the same issue. Yes, lowering the maxsessions from 6000 is the answer, IF it's the same problem. Likely, but not guranteed.
If you actually look at the store.idx for that particular user, what do you see? Is it near 2 gig? If so, then the user needs to either delete some messages or move some to another folder, as 2 gig is the limit for the store.idx file.....
jay

Http logs flooded with Account Notice: close unauthenticated

Hi,
In the http log file there is a flood of error messages on that logs an entriy eveytime someone clicks on something in it logs an entry
is there any specific reason why this is happening?
iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)
libimta.so 5.2 Patch 2 (built 19:30:12, Jul 14 2004)
SunOS mail 5.9 Generic_117171-07 sun4u sparc SUNW,Sun-Blade-1000
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 207 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 211 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 209 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 212 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 208 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 208 127 0
[18/May/2005:10:01:32 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:32 0:00:00 207 127 0
[18/May/2005:10:01:41 +0300] webmail httpd[22300]: Account Notice: close 1.229.1.187 xyz.rss 2005/5/18 10:00:52 0:00:49 0 0 1
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 493 377 0
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 508 4399 0
[18/May/2005:10:01:51 +0300] webmail httpd[22300]: Account Notice: close [132.17.22.162] [unauthenticated] 2005/5/18 10:01:51 0:00:00 208 127 0
[18/May/2005:10:02:04 +0300] webmail httpd[22300]: Account Notice: close [6.18.39.25] [unauthenticated] 2005/5/18 10:02:01 0:00:03 2736 2743 0

Hi Jay,
Does that mean that if the logs written "unauthenticated" it means the user actually did not login and it was just the user's PC "pinging" the server because their browser is still on and set to the msg server?
I am trying to graph the http log but my log is as below:
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 133.12.130.89 25528 2005/7/7 12:39:43 2:09:44 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 134.31.130.113 74881 2005/7/7 12:40:42 2:08:45 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close 130.32.82.111 28286 2005/7/7 12:42:14 2:07:13 0 0 1
[07/Jul/2005:14:49:27 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:27 0:00:00 19 149 0
[07/Jul/2005:14:49:29 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:29 0:00:00 19 149 0
[07/Jul/2005:14:49:31 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:31 0:00:00 19 149 0
[07/Jul/2005:14:49:33 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:33 0:00:00 19 149 0
[07/Jul/2005:14:49:35 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:35 0:00:00 19 149 0
[07/Jul/2005:14:49:37 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:37 0:00:00 19 149 0
[07/Jul/2005:14:49:39 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:39 0:00:00 19 149 0
[07/Jul/2005:14:49:40 +0800] myserver httpd[10763]: Account Notice: close [139.16.130.68] [unauthenticated] 2005/7/7 14:48:08 0:01:32 2476 7191 0
[07/Jul/2005:14:49:41 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:41 0:00:00 19 149 0
[07/Jul/2005:14:49:43 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:43 0:00:00 19 149 0
[07/Jul/2005:14:49:45 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:45 0:00:00 19 149 0
[07/Jul/2005:14:49:45 +0800] myserver httpd[10763]: Account Notice: close [139.16.130.68] [unauthenticated] 2005/7/7 14:48:08 0:01:37 2714 8341 0
[07/Jul/2005:14:49:47 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:47 0:00:00 19 149 0
[07/Jul/2005:14:49:49 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:49 0:00:00 19 149 0
[07/Jul/2005:14:49:51 +0800] myserver httpd[10763]: Account Notice: close [129.2.20.19] [unauthenticated] 2005/7/7 14:49:51 0:00:00 19 149 0
Can I assume that those without the [unauthenticated] are those who actually login during the time period? or is it logout?
Any suggestions on how to graph the http log?

Http logs in 7.11

Hi guys,
Do you know where to find http logs in 7.11? And also how to download these logs?
Thanks!

For logging HTTP messages:
Go to TCODE - SXMB_ADM
and add those paramaters:
LOGGING and LOGGING_SYNC category RUNTIME current value = 1 (active)
you can also set TRACE_LEVEL to 3 (on your DEV XI system) so that XI will document all processing steps and details
If you're referring to HTTP Service Logs, follow the above instructions.

Getting auth_user into http logs

We are currently using a vendors portal server product running on WebLogic 5.1SP8
on Solaris 8.
My question is : When a user authenticates to the portal and is logged in, how
can I get the userID written
to the http log. Currently the common logfile format of the http logs displays"-"
in the authuser location,
but does fill in the remotehost, date,request, status, and bytes fields. Thanks

Dear Murthy,
Hope you are doing good.
Try following in order to avoid the timeout:
1) refer to note 824554 and check whether increasing the ICM parameter helps to prevent the timeouts. Either set the parameter for icm/server_port_0 or increase icm/keep_alive_timeout (sec.) from 600 to 10000.
2) in the system settings change the profile parameter ms/http_timeout and ms/https_timeout to higher values.
3) Regarding the parameter rdisp/plugin_auto_logout, refer the blog: [BSP In-Depth: Confusion between Stateless, Stateful and Authentication]
(Timer: Session Management, Timer: HTTP Request Processing Time).
4) Set: icm/HTTP/esid_response_check = TRUE in the backend system, restart the server and perform a new test.
Thank you and have a nice day :).
Kind Regards,
Hemanth
SAP AGS

Failed to roll HTTP log file Error at Startup WL 8.1

Hi people, i´m having the following error on the Weblogic 8.1 console at startup , the applications works fine but i´m always having this:
####<Oct 19, 2004 6:44:12 PM CDT> <Error> <HTTP> <computerName> <portalServer> <ExecuteThread: '11' for queue: 'default'> <<WLS Kernel>> <> <BEA-101242> <Failed to roll HTTP log file for the Web server: portalServer.
java.io.IOException: Failed to rename log file on attempt to rotate logs
     at weblogic.servlet.logging.LogManagerHttp.rotateLog(LogManagerHttp.java:200)
     at weblogic.servlet.logging.LogManagerHttp.keepStatsAndRollIfNecessary(LogManagerHttp.java:349)
     at weblogic.servlet.logging.LogManagerHttp.log(LogManagerHttp.java:391)
     at weblogic.servlet.internal.HttpServer.log(HttpServer.java:1137)
     at weblogic.servlet.internal.ServletResponseImpl.send(ServletResponseImpl.java:1192)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2590)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)
>
Does anyone know what do i need to do in order to solve this problem??
thanks a lot
Guillermo De La Rosa

I'm having the same error message. I also noticed that the server is running a bit slower and that beasvc.exe is using more memory that usual.Has anyone logged a technical support case??
Thanks.
####<Sep 20, 2005 10:15:28 AM EDT> <Info> <HTTP> <ddca2401> <myserver> <ExecuteThread: '44' for queue: 'weblogic.kernel.Default'> <<anonymous>> <> <BEA-101047> <[ServletContext(id=17209502,name=apps,context-path=/apps)] /*: Using standard I/O>
####<Sep 20, 2005 10:15:28 AM EDT> <Error> <HTTP> <ddca2401> <myserver> <ExecuteThread: '44' for queue: 'weblogic.kernel.Default'> <<WLS Kernel>> <> <BEA-101242> <Failed to roll HTTP log file for the Web server: myserver.
java.io.IOException: Failed to rename log file on attempt to rotate logs
     at weblogic.servlet.logging.LogManagerHttp.rotateLog(LogManagerHttp.java:200)
     at weblogic.servlet.logging.LogManagerHttp.keepStatsAndRollIfNecessary(LogManagerHttp.java:349)
     at weblogic.servlet.logging.LogManagerHttp.log(LogManagerHttp.java:388)
     at weblogic.servlet.internal.HttpServer.log(HttpServer.java:1153)
     at weblogic.servlet.internal.ServletResponseImpl.send(ServletResponseImpl.java:1197)
     at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2574)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

302 in http.log

I am seeing a large numbe of 302 status codes in my http.log file. Is
this normal? the RFC states that this message implies a file is moved
and you are being redirected to it's new location. Is this what I am
seeing? If so, then why is it successfull "200" on the calls before and
after it? One distinction is that all "302" messages are for POSTs that
were exactly 271 bytes. Here's a sample of a log file:
[22/May/2002:14:24:12 -0500] "POST /bin/Servlet?action=Login HTTP/1.1"
200 16473 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
302 271 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
200 2776 206.103.66.134 - -

Hi,
302 is a normal HTTP Code it's simply state to look somewhere else to get what agent
(browser) is looking for. This can be achieved by a servlet or a JSP using API Servlet.
Sometimes it's also the application server that sends a "redirect" (for examples
: proprietary login form, HTTP error page, ...). HTTP code 200 following 302 is
often "normal", it simply state that the browser issue a new request to the location
found in the HTTP code 302 response an finally reach the ressources initialy requested.
If there is too much redirection in application design it can result in poor performance
since each 302 implies a round trip to the server...
Mark Vaughn <[email protected]> wrote:
I am seeing a large numbe of 302 status codes in my http.log file. Is
this normal? the RFC states that this message implies a file is moved
and you are being redirected to it's new location. Is this what I am
seeing? If so, then why is it successfull "200" on the calls before and
after it? One distinction is that all "302" messages are for POSTs that
were exactly 271 bytes. Here's a sample of a log file:
[22/May/2002:14:24:12 -0500] "POST /bin/Servlet?action=Login HTTP/1.1"
200 16473 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
302 271 206.103.66.134 - -
[22/May/2002:14:24:18 -0500] "POST /bin/Servlet?action=Search HTTP/1.1"
200 2776 206.103.66.134 - -

PabUri Error in http log

We are using the latest Comms 5 suite Messaging server and have migrated Data from IMS5.2 into the new environment and migrated the addressbook from the o=pab to o=PiServerDB using the pab2abs tool. We are not experiencing any problems with the addressbook, however we are seeing the following lines in the http log on the front end Messaging server:
httpd[29632]: General Error: No configured pab.ldaphost matches this pabURI: ldap://+oldldaphost+:389/ou=user,ou=People,o= test.com,o=+test+,o=pab
If the server should ignore the hostname in pabURIs, enable the option local.service.pab.alwaysusedefaulthost
The pabUri that it is showing is the users old pabUri from the old IMS5.2 environment and the users now have the correct psRoot attribute.
Should the pabUri be changed to show the piServerDB location for that user? remove the pabUri attribute for the users? or is there a setting in the messaging server that should be changed?

Hi,
mdpiot1 wrote:
We are using the latest Comms 5 suite Messaging server and have migrated Data from IMS5.2 into the new environment and migrated the addressbook from the o=pab to o=PiServerDB using the pab2abs tool.Are you using UWC or the older Messenger Express web-interface or both?
You only need to migrate the PAB data to o=PiServerDB if you intend to use UWC.
We are not experiencing any problems with the addressbook, however we are seeing the following lines in the http log on the front end Messaging server:
httpd[29632]: General Error: No configured pab.ldaphost matches this pabURI: ldap://+oldldaphost+:389/ou=user,ou=People,o= test.com,o=+test+,o=pab
If the server should ignore the hostname in pabURIs, enable the option local.service.pab.alwaysusedefaulthostThis error indicates that a user logged into Messenger Express and not UWC, as UWC addressbook related errors show up in the uwc.log file.
The pabUri that it is showing is the users old pabUri from the old IMS5.2 environment and the users now have the correct psRoot attribute.pabUri => Messenger Express
psRoot => UWC
Should the pabUri be changed to show the piServerDB location for that user?No this won't help.
Basically you have two independent address-books, one that UWC uses and the other that ME uses. The migration utility that you ran basically copies the ME PAB data to UWC, but this is a one-time thing. If your customers use both ME/UWC and changes both address-books they will not be kept in sync.
Regards,
Shane.

Calendar 5 : http.log and Fetchcomponents_by_range_reply_access

Hi,
Does someone know what this error means :
Fetchcomponents_by_range_reply_access ?
In my http.log I have lines like :
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5A80".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5B92".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "3B42".
Those calendars exist (5A80, 5B92, 3B42), and the everyone has full
control over those calendars. Can someone tell us the meaning of this error
Thank you very much,
Norbert

Hi,
What is the product ?
Regards
Raj
"Norbert Cauderan" wrote:
Hi,
Does someone know what this error means :
Fetchcomponents_by_range_reply_access ?
In my http.log I have lines like :
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5A80".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "5B92".
[05/Nov/2001:10:30:11 +0100] ldap cshttpd[124]: General Error: ac:
Fetchcomponents_by_range_reply_access: User "agenda" denied access on
fetching from calendar "3B42".
Those calendars exist (5A80, 5B92, 3B42), and the everyone has full
control over those calendars. Can someone tell us the meaning of this error
Thank you very much,
Norbert

Http.log debug entries

Hi,
I'm seeing a lot of below entries in my http.log file. Any one has an idea?
cshttpd[978]: General Debug: Cache DB Checkpoint Done
cshttpd[978]: General Debug: Cache DB Checkpoint Done
cshttpd[978]: General Debug: Got ppFileList of logfiles not needed. Retval = 0, ppFileList is at 0

stamford wrote:
I'm seeing a lot of below entries in my http.log file. Any one has an idea?What is the context of your question i.e. why are you even looking at Debug logs?
What version of Calendar Server are you running (./csversion)?
Regards,
Shane.

Https log in error

Hi experts
i'd like to know how is possible to solve this log-in error
No switch to HTTPS occurred, so it is not secure to send a password Client, name, or password is not correct; log on again
Regards
andrea

Hi Andrea,
go to
- TA SICF
- select the service where you are facing the message (e.g. BBPSTART)
- tab "logon data"
- change the "security requirement" to SSL
This should help.
Best regards,
Georg

Issue understanding PFRO Log

Hey Everyone,
I have, what I hope to be a pretty simple question. Here we go.
I was looking at the PFRO Logs as I am trying to understand different system level things, for a class I am taking on System Administration (I am taking a deeper dive). When I came across the PFRO logs, I found something similar to the following:
7/22/2011 10:43:23 - PFRO Error: \??\C:\Users\UserName\AppData\Local\Temp\download_file_name.exe, |delete operation|, 0xc000003a
7/22/2011 10:43:23 - 1 Successful PFRO operations
Does this mean that the system was deleting the file "download_file_name.exe" and it was successful. As this is what it appears to be. I am not sure, and hoping someone can clarify as the "PFRO Error" is throwing me off.
Any help is greatly appreciated.
Thanks in advance.
Darksider

Hi,
Some products and updates use a registry key to store information about pending file rename operations (PFRO). This feature is used when files that have to be updated that are locked or that are being used, the installer writes the files to a temp location
and renames them after a restart.
The delete operation in your log means that the file (the pending file) is successfully deleted after a restart.
Kate Li
TechNet Community Support

Understanding MapViewer log - total time loading X features

Hi All,
I'm interested in finding out more about how to understand the following lines from the log file.
What I'm unsure about is what "total time loading features" means. For example Theme_14 has a sql exec time of 1797ms, however the total time loading 3 features is 21233ms.
I'm assuming the total time includes the sql exec time. However there is about 20 seconds extra. Understanding this time should allow me to make changes to reduce it.
What is MapViewer doing in that time? / What are the components that make up the "total time loading features"?
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_1 ] sql exec time: 63ms, total time loading 0 features: 63ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_2 ] sql exec time: 422ms, total time loading 0 features: 422ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_3 ] sql exec time: 422ms, total time loading 7 features: 422ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_4 ] sql exec time: 422ms, total time loading 0 features: 422ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_5 ] sql exec time: 516ms, total time loading 0 features: 516ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_6 ] sql exec time: 500ms, total time loading 0 features: 500ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_7 ] sql exec time: 516ms, total time loading 0 features: 516ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_8 ] sql exec time: 422ms, total time loading 5 features: 422ms.
Mon Apr 21 14:57:30 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_9 ] sql exec time: 516ms, total time loading 0 features: 516ms.
Mon Apr 21 14:57:31 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_10 ] sql exec time: 218ms, total time loading 0 features: 218ms.
Mon Apr 21 14:57:31 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_11 ] sql exec time: 437ms, total time loading 12 features: 453ms.
Mon Apr 21 14:57:31 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_12 ] sql exec time: 766ms, total time loading 16 features: 1141ms.
Mon Apr 21 14:57:32 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_13 ] sql exec time: 906ms, total time loading 1 features: 1735ms.
Mon Apr 21 14:57:51 EST 2008 DEBUG [oracle.sdovis.theme.pgtp] [ THEME_14 ] sql exec time: 1797ms, total time loading 3 features: 21233ms.
Mon Apr 21 14:57:51 EST 2008 INFO [oracle.sdovis.DBMapMaker] **** time spent on loading features: 21233ms.
Your time is appreciated. Any other comments are also welcome.

Hi,
the "total time loading features" includes the whole process to prepare the theme data. It includes the SQL execution time plus the data fetching plus some other minor tasks which do not affect much the final total time. So basically look for the SQL exec time and the fetching/loading of data. In your case, the fetching/loading of THEME_14 geometries is taking too long. Also the SQL exec time for just 3 features seems high. For the fetching, check if the geometries are too detailed (too may points), and for the SQL check if you can improve it (the log, in finest mode, also shows the query executed).
Joao

Https (log in) pages and Top Sites...

I'm having trouble making any page that's https (such as log in pages) permanent in Top Sites. I get everything set up the way I want, quit, and upon restart, everything with https is gone, while my other permanent sites are still there as I left them.
Does Top Sites not allow https pages to be marked as permanent?
Thanks

Hi Rob,
Try maintenance ...
From the Safari Menu Bar, click Safari / Empty Cache. When you are done with that...
From the Safari Menu Bar, click Safari / Reset Safari. Select the top 5 buttons and click Reset.
If Safari unexpectedly quits, it could be a 3rd party plugins causing the problem. Go to ~/Library/Internet Plugins. Move any 3rd party plugins to the Trash and restart your Mac.
Also, if you are running Safari in 64 bit mode, try running in 32-bit mode instead. Right or control click the Safari icon in the Applications folder, then click: Get Info In the Get Info window click the black disclosure triangle next to General so it faces down. Select 32 bit mode. Quit Safari then relaunch.
While you have the Get Info window open for Safari, make sure it's not running in Rosetta.
Keep your system software up to date. Go to the Apple Menu / Software Updates.
Repair disk permissions...
Quit any open applications/programs. Launch Disk Utility. (Applications/Utilities) Select MacintoshHD in the panel on the left, select the FirstAid tab. Click: Repair Disk Permissions. When it's finished from the Menu Bar, Quit Disk Utility and restart your Mac. If you see a long list of "messages" in the permissions window, it's ok. That can be ignored. As long as you see, "Permissions Repair Complete" when it's finished... you're done. Quit Disk Utility and restart your Mac.
Carolyn

Understanding http log

Similar Messages

Maybe you are looking for