Windows Server 2003 Logging

  • Thread starter Thread starter IshmaelDS
  • Start date Start date
I

IshmaelDS

I need help finding a good log software. I have an issue with my 2k3
server that is not being caught by the event viewer. This server is
running a Progress DB so I need it to be rather lightweight but fairly
intensive as well. I'm not sure what the issue is, The system says
it's rebooting but it doesn't reboot physically. When I log in it
asks me why it shut down as it would from a unexpected shutdown and
the event viewer says that it shut down but there are logs in the
application viewer from seconds after the unextected shutdown and when
i arrive at the server it's been less then 30 seconds and the system
is back up with the DB's loaded. It's very odd. If you have any
ideas that could be causing the shutdown's or know of a good logging
software that would be much appreciated. Thanks.
 
hello,

stop the reboot after crash, so you will the BSOD (Blue Screen Of Death)
Do you have a c:\windows\memory.dmp ?


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"IshmaelDS" <ishmaelds@gmail.com> wrote in message
news:1187716033.781359.106430@q3g2000prf.googlegroups.com...
>I need help finding a good log software. I have an issue with my 2k3
> server that is not being caught by the event viewer. This server is
> running a Progress DB so I need it to be rather lightweight but fairly
> intensive as well. I'm not sure what the issue is, The system says
> it's rebooting but it doesn't reboot physically. When I log in it
> asks me why it shut down as it would from a unexpected shutdown and
> the event viewer says that it shut down but there are logs in the
> application viewer from seconds after the unextected shutdown and when
> i arrive at the server it's been less then 30 seconds and the system
> is back up with the DB's loaded. It's very odd. If you have any
> ideas that could be causing the shutdown's or know of a good logging
> software that would be much appreciated. Thanks.
>
 
Disable Automatic Restart on System Failure
opening the System control panel, selecting the Advanced tab, clicking
Settings under Startup and Recovery Settings and on the Startup and Recovery
dialog box, clearing the Automatically restart check box under System
Failure.

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Mathieu CHATEAU" <gollum123@free.fr> wrote in message
news:O3Tu7qC5HHA.5724@TK2MSFTNGP05.phx.gbl...
> hello,
>
> stop the reboot after crash, so you will the BSOD (Blue Screen Of Death)
> Do you have a c:\windows\memory.dmp ?
>
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "IshmaelDS" <ishmaelds@gmail.com> wrote in message
> news:1187716033.781359.106430@q3g2000prf.googlegroups.com...
>>I need help finding a good log software. I have an issue with my 2k3
>> server that is not being caught by the event viewer. This server is
>> running a Progress DB so I need it to be rather lightweight but fairly
>> intensive as well. I'm not sure what the issue is, The system says
>> it's rebooting but it doesn't reboot physically. When I log in it
>> asks me why it shut down as it would from a unexpected shutdown and
>> the event viewer says that it shut down but there are logs in the
>> application viewer from seconds after the unextected shutdown and when
>> i arrive at the server it's been less then 30 seconds and the system
>> is back up with the DB's loaded. It's very odd. If you have any
>> ideas that could be causing the shutdown's or know of a good logging
>> software that would be much appreciated. Thanks.
>>

>
 
There is no dump file because the system isn't actually rebooting.
I'll turn off auto reboot and see if that gives any better error
messages. Any suggestions on some better loggin system then event
viewer?
 
strange it says it reboot while you say it didn't

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"IshmaelDS" <ishmaelds@gmail.com> wrote in message
news:1187726194.038588.197600@e9g2000prf.googlegroups.com...
> There is no dump file because the system isn't actually rebooting.
> I'll turn off auto reboot and see if that gives any better error
> messages. Any suggestions on some better loggin system then event
> viewer?
>
 
I agree it's very strange. That's why i'm asking the community if
they have any ideas or software that will possibly log the error.
 
Can you check in your eventlog for the lasts 6005 event (eventlog source) ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"IshmaelDS" <ishmaelds@gmail.com> wrote in message
news:1187729655.811522.302750@q3g2000prf.googlegroups.com...
>I agree it's very strange. That's why i'm asking the community if
> they have any ideas or software that will possibly log the error.
>
 
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6005
Date: 8/20/2007
Time: 12:12:09 PM
User: N/A
Computer: APPRISE
Description:
The Event log service was started.

Along with this there are a bunch of other services that started that
look as if it rebooted. I just know it didn't. If i was to trust
the event viewer I would say it rebooted. But I got dissconnected
from it and walked over to the server and logged in in less than 30
seconds while the server takes at least 5 minutes to reboot. It's very
strange. I'm wondering if the system service was to stop if it may
create this same behaviour when it restarted.
 
what is the uptime of the server (from the task manager, check "system idle
process" cpu time)

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"IshmaelDS" <ishmaelds@gmail.com> wrote in message
news:1187737425.293435.210680@i13g2000prf.googlegroups.com...
> Event Type: Information
> Event Source: EventLog
> Event Category: None
> Event ID: 6005
> Date: 8/20/2007
> Time: 12:12:09 PM
> User: N/A
> Computer: APPRISE
> Description:
> The Event log service was started.
>
> Along with this there are a bunch of other services that started that
> look as if it rebooted. I just know it didn't. If i was to trust
> the event viewer I would say it rebooted. But I got dissconnected
> from it and walked over to the server and logged in in less than 30
> seconds while the server takes at least 5 minutes to reboot. It's very
> strange. I'm wondering if the system service was to stop if it may
> create this same behaviour when it restarted.
>
 
Currently the CPU time for system idle is 53:41:05. The problem has
happened in the last 24 hours. Another note is that it seems that it
could be releated to TS/RDP as it seems to only have happened when
somone is logging in via RDP. As it stands this is relativly
circumstantial but I'm going to continue to look into it. Just
thought it might help.
 
Back
Top