locked
Difference between IIS Logs SharePoint ULS Logs RRS feed

  • Question

  • Hi All,

    I wanted to ask if there was any difference between IIS and SharePoint ULS logs. If IIS logs are  properly configured do you think there is a need to capture SharePoint activity in the ULS logs.

    Thanks in advance.

    Tuesday, September 25, 2012 3:05 PM

Answers

  • Both logs show different information, each important in different ways.

    The IIS logs typically show information about the HTTP request that was made to the server. This will contain the time,  user name, IP address, page requested, and HTTP status code. Most of this information is not present in the ULS logs or may not be present with all log entries.

    The ULS logs are generated by components of the SharePoint application. These logs contain useful tracing information that can be used to troubleshoot or monitor issues. You can set the verbosity of each component (or group of components) individually so you can have some spitting out lots of information and others that don't log anything at all. The information in these logs is generated after a user makes the request to SharePoint (i.e. after IIS has authenticated them) so you will not see the detail from the ULS logs in the IIS logs. Also, the ULS logs contains log entries from all systems and services in SharePoint so even when no one is accessing the farm it is normal for SharePoint to be logging information to the log.

    TLDR: You should enable ULS logs.


    Jason Warren
    Infrastructure Architect

    • Proposed as answer by Trevor SewardMVP Tuesday, September 25, 2012 5:01 PM
    • Marked as answer by MossNovice Tuesday, September 25, 2012 10:23 PM
    Tuesday, September 25, 2012 3:19 PM
  • Hi,

    IIS logs are useful to detect or to track the site request information ( it is not contain any application related data)

    ULS logs are specially designed to Sharepoint tracking which tracks each events happening in sharepoint world. You can find a lot of information from  object creation logs to central Admin events. ( it is mainly designed to track application related data)

    Thanks!


    - Amol Khairnar | http://sharepointeditor.com | http://in.linkedin.com/in/amolkhairnar

    • Proposed as answer by amol.khairnar Tuesday, September 25, 2012 6:04 PM
    • Marked as answer by MossNovice Tuesday, September 25, 2012 10:22 PM
    Tuesday, September 25, 2012 6:04 PM

All replies

  • Both logs show different information, each important in different ways.

    The IIS logs typically show information about the HTTP request that was made to the server. This will contain the time,  user name, IP address, page requested, and HTTP status code. Most of this information is not present in the ULS logs or may not be present with all log entries.

    The ULS logs are generated by components of the SharePoint application. These logs contain useful tracing information that can be used to troubleshoot or monitor issues. You can set the verbosity of each component (or group of components) individually so you can have some spitting out lots of information and others that don't log anything at all. The information in these logs is generated after a user makes the request to SharePoint (i.e. after IIS has authenticated them) so you will not see the detail from the ULS logs in the IIS logs. Also, the ULS logs contains log entries from all systems and services in SharePoint so even when no one is accessing the farm it is normal for SharePoint to be logging information to the log.

    TLDR: You should enable ULS logs.


    Jason Warren
    Infrastructure Architect

    • Proposed as answer by Trevor SewardMVP Tuesday, September 25, 2012 5:01 PM
    • Marked as answer by MossNovice Tuesday, September 25, 2012 10:23 PM
    Tuesday, September 25, 2012 3:19 PM
  • Hi,

    IIS logs are useful to detect or to track the site request information ( it is not contain any application related data)

    ULS logs are specially designed to Sharepoint tracking which tracks each events happening in sharepoint world. You can find a lot of information from  object creation logs to central Admin events. ( it is mainly designed to track application related data)

    Thanks!


    - Amol Khairnar | http://sharepointeditor.com | http://in.linkedin.com/in/amolkhairnar

    • Proposed as answer by amol.khairnar Tuesday, September 25, 2012 6:04 PM
    • Marked as answer by MossNovice Tuesday, September 25, 2012 10:22 PM
    Tuesday, September 25, 2012 6:04 PM