Welcome to ISAserver.org

How to retreive ISA logs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> How to retreive ISA logs

Page: [1]

Message

<< Older Topic Newer Topic >>

How to retreive ISA logs - 3.Mar.2009 8:41:47 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

I had to re-install ISA 2004 after it did not allow VISTA machines to connect to the network.

Now after I re-installed ISA I want it to give me reports on the logs that I asked ISA to keep during the uninstall.

So how do I get ISA to use the report logs that it backed up or left behind for the new Installation.

Post #: 1

Featured Links*

RE: How to retreive ISA logs - 7.Mar.2009 4:26:30 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hi,

have you looked inside C:\Program Files\Microsoft ISA Server

By default, these files are kept there inside their respective folders.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to jpdw)

Post #: 2

RE: How to retreive ISA logs - 9.Mar.2009 1:53:15 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

Yes my log files are there but ISA does not want to include them when I generate a report.

What happend was that the Firewall blocked all Vista users from connecting to the DHCP server and then I had to uninstall and reinstall ISA but during the uninstall i asked that my ISA logs be kept. But now how do I get my logs to work again.

ISA doesn't want to use them and I dont know why. If you can help me, please do as the information that I need to pull from it is very important to our company.

Thanks.

< Message edited by jpdw -- 9.Mar.2009 6:45:26 AM >

(in reply to jpdw)

Post #: 3

RE: How to retreive ISA logs - 17.Mar.2009 4:31:03 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

Can someone please help me on this, Why is ISA not pulling info from my backed up logs in the generated reports.

Please help, if I do not get the required report I need our company is going to lose money.

Thanks

(in reply to jpdw)

Post #: 4

RE: How to retreive ISA logs - 17.Mar.2009 5:00:26 AM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

By the way, you old reports might be still inside the ISA Reports folder inside the ISA Server folder inside program files.

also check this free tool : http://www.redline-software.com/eng/products/tk/components/mdf_viewer.php

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to jpdw)

Post #: 5

RE: How to retreive ISA logs - 17.Mar.2009 5:15:11 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

yes the the logs are in that folder, but ISA does not want to retrieve the info from those logs which is what I find strange.

Would you know why it is doing this?

(in reply to elmajdal)

Post #: 6

RE: How to retreive ISA logs - 17.Mar.2009 6:31:40 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

I have downloaded the toolkit and used the MDF viewer and it works, it opens the log files and can view them but, I need a detailed report of bandwidth usage and ISA is not using these backed up logs in the reports that I generate.

What can I do to fix this problem?

Thanks.

(in reply to jpdw)

Post #: 7

RE: How to retreive ISA logs - 17.Mar.2009 6:38:33 AM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

ORIGINAL: jpdw

yes the the logs are in that folder,

I didnt mean the logs folder, I mean the Reports folder.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to jpdw)

Post #: 8

RE: How to retreive ISA logs - 17.Mar.2009 6:56:01 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

Ok, I have a ISALogs folder and ISAsummaries folder.

The ISA summaries folders frist entry starts from 20090302- which is the 2nd of March 09.

The ISALogs folders first entry starts from 20090224- which is 24 Feb 09.

Now what Im missing is Bandwidth usage for 24 Feb to 4th of March 09.

If I understand correctly, If I have Log files dating back to 24 Feb 09, i should be able to generate a detailed Report of bandiwdth usage from 24 Feb upto today.

Please help me if im wrong, but there must be a way to retrieve the lost info again as I did not allow ISA to uninstall the Log files.

(in reply to jpdw)

Post #: 9

RE: How to retreive ISA logs - 17.Mar.2009 9:07:04 AM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

Isa's bandwidth usage graphs are not very accurate at all...and ISA does not block Vista clients from DHCP servers.

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to jpdw)

Post #: 10

RE: How to retreive ISA logs - 17.Mar.2009 9:35:10 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

I have discovered that ISA does not give accurate bandwidth usage but the Vista thing is very interesting.

But how can I get detailed bandwidth reports and fix the Vista DHCP thing.

Im using Webmonitor but its not user friendly, it wants me to use SQL server for compiling detailed reports and Ive tried using its report features and honestly it sucks if you dont know how to use SQL server.

Is there a better way and still I need to be able to pull reports from the backed up log but ISA does not want to do this. Please help.

Thanks

(in reply to jpdw)

Post #: 11

RE: How to retreive ISA logs - 17.Mar.2009 9:55:34 AM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

I use Webmonitor for what you want to do.

Webmonitor is very easy to configure & use if you spend an hour learning the ins & outs.

As to the DHCP issue, why would the Vista clients be routing through ISA to accept DHCP leases?

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to jpdw)

Post #: 12

RE: How to retreive ISA logs - 17.Mar.2009 10:10:23 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

With Webmonitor I have discoverd that it gives me a lower bandwidth usage amount on a specific user where as ISA gives more.

eg. user one under webmonitor used 45 MB bandwidth and under ISA reporting user one used 56 MB.

but " As to the DHCP issue, why would the Vista clients be routing through ISA to accept DHCP leases?"

what do you mean by this? should I not allow Vista to recieve leases from DHCP?

(in reply to SteveMoffat)

Post #: 13

RE: How to retreive ISA logs - 17.Mar.2009 10:59:29 AM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

I would beleive webmonitor. ISA will be logging cache requests too I think.

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to jpdw)

Post #: 14

RE: How to retreive ISA logs - 18.Mar.2009 6:05:14 AM

jpdw

Posts: 43
Joined: 27.Jan.2009
Status: offline

I would only have an overall picture of webmonitor if the report part of it was easy to setup.

I installed SQL Server 2005 and then I used the MSFW database for Webmonitor to use for Webmonitor Report Pack but the report pack says that it needs to use a Microsoft SQL database and not a MSDE database.

Now I have SQL server installed but I dont know how to create a new database for webmonitor to use. If I knew I would do it and then and be able to see how accurate webmonitor really is other that ISA's reports.

If you know how to do this your help will be appreciated as the Webmonitor support did not help much.

But My ISA is still not using the backed up logs when I generate a new report, It only uses the new reports.

Why? I do not know.

(in reply to SteveMoffat)

Post #: 15