Event Viewer and Logs

Guy's Litmus Test: How many errors do you see in your Event Logs?

Best Practice (Litmus Test)

Professionals have very few errors in the Event Logs

Amateurs see lots of red dots in their Event Viewer

Event Viewer and Logs

Where NT 4.0 had three event logs, Windows 2000 domain controllers had six event logs and Server 2003 even more.  Lots of red dots in the event logs shout to me - 'Amateurs in charge'. On the other had few red dots, and regular archives it whispers quietly: - 'Professionals work here'.  While you are in the Event Viewer, remember to check the Application log as well as the System Log, especially if you are running Exchange or SQL.

Increase the log size from the default of 512K to about 4MB.

Use the filter in event viewer, Filter hidden away under the View menu.

Employ VBScripts or PowerShell cmdlets to help you monitor the logs.

Logon Error

Here is a severe problem with the CP domain - no logon servers available.  Investigation revealed that CP domain controllers were offline.

Train Signal has now released their Windows Server 2008 Training Course.  As an MCT trainer, I am a huge advocate of Train Signal’s products. What particularly impresses is me is the demonstrations.  If you are looking for a complete DETAILED coverage of Windows Server 2008, then I highly recommend that you give this course a try.  I have reviewed their 6 hours plus of videos myself, and I guarantee that you will not be disappointed!

Watch a Windows Server 2008 Training Video Demo.

Challenge: Check the event logs DAILY.

• Checking each log will give you a chance to practice troubleshooting skills
• Mastering the Event Viewer gives you a feel of the pulse of your server.
• Eliminating Errors will prevent problems on your network.  For example, the log tells you that the mail service has stopped, so you restart it before users notice that there is no e-mail.

You are always allowed to ask for a bonus!

I dare you to ask your boss for a bonus based on how many red dots (Errors) there are in the logs.  This is the system that my mate 'mad' Mick negotiated.  He starts with £100 a quarter per server, if there are no errors he gets the £100 but for each error he loses £1.  Blue (Information) and yellow (warning) messages do not count. After a shaky start where he owed the company £574, he now pockets a nice bonus and has learnt a great deal in the process.

See more on Event IDs

Another of Guy's Litmus Tests - Performance Monitoring

Professionals install ipMonitor (40% off until Sept 26th)
Consequently they can see instantly which servers are short of resources, and which are running smoothly.  

Amateurs
Keep their fingers crossed that the servers have enough memory and disk space.

Free Download of SolarWinds ipMonitor

Sign up to my new Ezine and get a free Best Practice ebook. 

 *