Mike Lee's Blog,SharePoint, Exchange, Outlook and Hybrid Support Blogs

Script to copy specified IIS logs from multiple Servers

Mike Lee - June 14, 2019 - 0 Comments

Summary Need to copy a set of IIS logs from multiple servers for data analysis? Are you doing it manually? If so, please check out this script as it will help expedite the process. The Script:

#Modify Inputs

# Host and Drive to store the IISLogs
$Hostdir = "\\HOSTSERVER\c$" 

# Actual Location of the IIS Logs on the Server
$iislogsfolder = "c$\inetpub\logs\LogFiles\W3SVC1892304237"

#A wild card parameter to determine a file range
$thefiles = "*ex1906*"


# Create a target folder on host if does not exist
 $TARGETROOT = "$Hostdir\logs"
 if(!(Test-Path -Path  $TARGETROOT)){
 New-Item -ItemType directory -Path  $TARGETROOT
 }


# Create an export folder if it does not exist
$target = "$Hostdir\logs\export"
 if(!(Test-Path -Path  $target)){
 New-Item -ItemType directory -Path $target
 }


#Simple Server list
$servers = Get-Content C:\servers.txt

# For loop to do the work
foreach ($server in $servers)
{

#make a new folder by server name if it does not exist
 $TARGETDIR = "$target\$Server"
 if(!(Test-Path -Path  $TARGETDIR)){
 New-Item -ItemType directory -Path $TARGETDIR
 }

#Get the files
$iislogLogDir = "\\$server\$iislogsfolder"
$iislogName = Get-ChildItem "$iislogLogDir" -Recurse -Include "$thefiles" | Get-Item

#Start a loop to copy all the files to the host locatiion
foreach ($log in $iislogName) {
copy-Item -path $log $TARGETDIR
}
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

#Modify Inputs

# Host and Drive to store the IISLogs

$Hostdir = "\\HOSTSERVER\c$"

# Actual Location of the IIS Logs on the Server

$iislogsfolder = "c$\inetpub\logs\LogFiles\W3SVC1892304237"

#A wild card parameter to determine a file range

$thefiles = "*ex1906*"

# Create a target folder on host if does not exist

$TARGETROOT = "$Hostdir\logs"

if(!(Test-Path -Path $TARGETROOT)){

New-Item -ItemType directory -Path $TARGETROOT

}

# Create an export folder if it does not exist

$target = "$Hostdir\logs\export"

if(!(Test-Path -Path $target)){

New-Item -ItemType directory -Path $target

}

#Simple Server list

$servers = Get-Content C:\servers.txt

# For loop to do the work

foreach ($server in $servers)

{

#make a new folder by server name if it does not exist

$TARGETDIR = "$target\$Server"

if(!(Test-Path -Path $TARGETDIR)){

New-Item -ItemType directory -Path $TARGETDIR

}

#Get the files

$iislogLogDir = "\\$server\$iislogsfolder"

$iislogName = Get-ChildItem "$iislogLogDir" -Recurse -Include "$thefiles" | Get-Item

#Start a loop to copy all the files to the host locatiion

foreach ($log in $iislogName) {

copy-Item -path $log $TARGETDIR

}

What the Script Does You only need to modify the inputs and create a server list. Then the […]

Script to backup event logs using a server list

Mike Lee - June 6, 2019 - 0 Comments

Script to backup event logs using a server list

Summary Have you ever needed to back up event logs for root cause analysis or auditing? Did you access each server and manually export the requested log file? If yes, I hope you find this script handy. The script

 
# Specify which Log File
$EventLogName = “Application”

# Specify drive to store event logs
$drive= “c$”

# Specify server to store event logs
$dest = "SERVERNAME"

#Simple Server list
$servers = Get-Content C:\servers.txt
# For loop to do the work
foreach ($server in $servers)
{

# Create a target folder on host if does not exist
 $TARGETROOT = "\\$server\$drive\logs"
 if(!(Test-Path -Path  $TARGETROOT)){
 New-Item -ItemType directory -Path  $TARGETROOT
 }
  
# This is the WMI call to select the application log from each server
$logFile = Get-WmiObject -EnableAllPrivileges -ComputerName $server Win32_NTEventlogFile | Where-Object {$_.logfilename -eq $EventLogName}

# Creating a file name based on server, log and time
$exportFileName = $server + “_” + $EventLogName + “_” +(get-date -f yyyyMMdd) + “.evt”

# Perform the backup
$logFile.backupeventlog($TARGETROOT + “\” + $exportFileName)

# Create an export folder if it does not exist
$target = "\\$dest\$drive\logs\export"
 if(!(Test-Path -Path  $target)){
 New-Item -ItemType directory -Path $target
 }

# Since WMI does the work on the remote machine you can’t copy to file share.

# This is a workaround to move to files to a single location after the backup
Move-Item $TARGETROOT\$exportFileName $target
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

# Specify which Log File

$EventLogName = “Application”

# Specify drive to store event logs

$drive= “c$”

# Specify server to store event logs

$dest = "SERVERNAME"

#Simple Server list

$servers = Get-Content C:\servers.txt

# For loop to do the work

foreach ($server in $servers)

{

# Create a target folder on host if does not exist

$TARGETROOT = "\\$server\$drive\logs"

if(!(Test-Path -Path $TARGETROOT)){

New-Item -ItemType directory -Path $TARGETROOT

}

# This is the WMI call to select the application log from each server

$logFile = Get-WmiObject -EnableAllPrivileges -ComputerName $server Win32_NTEventlogFile | Where-Object {$_.logfilename -eq $EventLogName}

# Creating a file name based on server, log and time

$exportFileName = $server + “_” + $EventLogName + “_” +(get-date -f yyyyMMdd) + “.evt”

# Perform the backup

$logFile.backupeventlog($TARGETROOT + “\” + $exportFileName)

# Create an export folder if it does not exist

$target = "\\$dest\$drive\logs\export"

if(!(Test-Path -Path $target)){

New-Item -ItemType directory -Path $target

}

# Since WMI does the work on the remote machine you can’t copy to file share.

# This is a workaround to move to files to a single location after the backup

Move-Item $TARGETROOT\$exportFileName $target

}

What does it the script do? This script will read a list of servers and […]

SharePoint / How is mail deleted from the “DROP” Folder?

Mike Lee - March 11, 2019 - 0 Comments

SharePoint / How is mail deleted from the “DROP” Folder?

Summary I recently worked on a case that involved slow incoming mail destined to SharePoint libraries. We found the problem was caused by a buildup of mail in the “drop” folders across multiple servers. Looking closer at the issue, we found that most of the messages were intended for aliases that no longer existed. Example: […]

How to disable the modern experience in SharePoint 2019

Mike Lee - November 21, 2018 - 0 Comments

How to disable the modern experience in SharePoint 2019

Summary SharePoint 2019 delivers an updated modern look and feel for lists and libraries and enabled by default. Modern: […]

Is SMTP Auth Really Working?

Mike Lee - September 22, 2018 - 1 Comment

Summary Now that SharePoint 2019 supports SMTP authentication you have the option to relay e-mail from SharePoint to any SMTP server that supports SMTP authentication. However, if you are using a port that falls back to anonymous, how do you if it’s authenticating and not just falling back to anonymous? Let’s look at the traffic […]

SharePoint requests fail when memory is low

Mike Lee - August 11, 2018 - 0 Comments

SharePoint requests fail when memory is low

Summary When working in virtual labs, I don’t always adhere to best practices. For example, we all know the minimum memory recommendation for SharePoint is 16GB for production use. So, when testing in my labs, SharePoint web requests may fail. As a result, I find myself troubleshooting the issue, only to find the failure was […]

Does SharePoint 2019 still need the SMTP Service?

Mike Lee - August 9, 2018 - 6 Comments

Does SharePoint 2019 still need the SMTP Service?

Summary Now that SharePoint Server 2019 has been released, the official deprecated / removed list has been published. After reading this you may have noticed that “Incoming email automatic mode” has been removed from the product. Incoming email automatic mode As announced by the Windows Server team, Microsoft is deprecating the IIS 6 Management compatibility […]

Finally – SMTP Authentication included with SharePoint 2019

Mike Lee - July 25, 2018 - 0 Comments

Finally – SMTP Authentication included with SharePoint 2019

Summary On July 24, 2018 Microsoft has announced the availability of both SharePoint Server 2019 Preview and Project Server 2019 Preview. One of the features I’m excited about is SMTP Authentication directly from SharePoint. This means, there is no need to setup a standalone SMTP relay just for SharePoint to send outgoing e-mail when authentication is required. […]

Unable to access Crawl History from SharePoint Central Admin

Mike Lee - June 28, 2018 - 0 Comments

Unable to access Crawl History from SharePoint Central Admin

Summary Have you experienced an issue where “Crawl History” is inaccessible in your Farm and throwing error, “Could not find stored procedure ‘Search_GetRepositoryTimePerCrawl’“? If so, you may have some across this blog https://blogs.msdn.microsoft.com/sambetts/2014/12/10/sharepoint-2013-crawl-history-error/ which details how the store procedure is created and the issue could be that the timer job to complete the provisioning is […]

Create a wild card DNS zone for SharePoint APPS

Mike Lee - February 24, 2018 - 0 Comments

Create a wild card DNS zone for SharePoint APPS

Summary To support installing and publishing APPS from your SharePoint Farm you will need to configure DNS to support a wild card host names for the specified app domain. This blog will demonstrate a quick way to configure your Microsoft Active Directory integrated DNS Server to support SharePoint Apps. Why is this needed? The APP […]