locked
SharePoint usage reporting - missing data from ANLHit RRS feed

  • Question

  • Hi All,

    On our MOSS 2007 farm, knowing about the logging tables for usage reporting which reside in the above table in the SSP database only stores a rolling 31 days worth of data, we have a SQL process that archives this data, ultimatly for reporting in SSAS. I've had a recent query from a business user that has prompted some investigation - there seems to be large chunks of data missing from ANLHist. Taking myself as an example, I know I use our SharePoint platform every working day, and there are others around me that do too, but the reporting does not reflect this - there are large gaps in the data.

    My investigations have lead me to Common Files\Microsoft Shared\Web Server Extensions\12\Logs, where one would expect to see folder for every site collection. However on one of our two WFEs, there are several missing. It's my understanding that a timer job takes the '00.log' file(s) from this location to populate the ANLHit table.

    I've done as much investigation as I am aware of and have drawn blanks, is anyone able to assist in this matter and suggest what the issue may be? I'm not sure if the missing folders are a red herring?

    Thanks in advance.

    TW

    Monday, November 29, 2010 10:06 AM

Answers

  • If anyone with a similar problem is monitoring this post, I can report that the issue has been fixed.

    By trawling in some detail through the trace log after setting logging level to Verbose in the Operations part of Central Admin we saw that there were issues with SharePoint being able to create new folders in Common Files\Microsoft Shared\Web Server Extensions\12\Logs on the offending WFE.

    After changing the permissions to this folder to allow the service accounts write access to the folders the logs started to appear. Quite why these permissions disappeared I'm not too sure myself.

    • Marked as answer by TobiasWest Wednesday, December 22, 2010 10:43 AM
    Wednesday, December 22, 2010 10:43 AM