Cisco Unified MeetingPlace, Release 7.0 -- How to Configure the Lumberjack Logging Utility

From DocWiki

Jump to: navigation, search

Main page: Cisco Unified MeetingPlace, Release 7.0

Up one level: Configuration

Lumberjack is a logging utility that runs as a background thread. Lumberjack periodically dumps several logs at 24-hour intervals and stores those logs, as well as a specified number of older logs, in a configurable location. All the configuration settings are stored in the registry and worked in to the current registry setting structure of Cisco Unified MeetingPlace. Performance monitor logging configuration settings are stored in definition INI file, so counter list and logging interval can be easily changed.


Lumberjack Logging Utility

Upon startup of the master service, a new thread for Lumberjack begins. Lumberjack reads the configuration values from the registry and INI file to determine behavior. If a performance monitor definition INI file does not exist, Lumberjack automatically creates a file with a predefined counter list and logging interval by using the Lumberjack default values.

Every 24 hours, Lumberjack creates a new Gateway SIM event log for a 24-hour window. If the eventlog terminates before midnight, Lumberjack restarts it. If the event log runs past midnight of the day that the first call was made, Lumberjack terminates that process. During routing log gathering, Lumberjack also acquires the following information:

  • Performance monitor (24-hour window)
  • NT application and system eventlog
  • Registry snapshots
  • IIS log

When the master service is running and Lumberjack is enabled, it detects stopped (crashed) services and collects the following information in a temp folder in the Windows temp directory:

  • GWSIM eventlog (24 hour window)
  • NT application and system eventlog
  • Registry snapshots
  • IIS log
  • DrWtsn.log and User.dmp
  • .exe, .map, and .pdb of downed services
  • binaries for authfilt.dll (if downed IIS)

After the information is collected, Lumberjack bundles the files by using pkzipc.exe. This executable file is distributed with MPWEB and located in the DataSvc folder.

The naming convention for the file is lumberjack_<timestamp>.zip for routine logs and lumberjackCrash_<timestamp>.zip for crash logs, where <timestamp> is the time the log gathering started for routine logs and the time of the detected crash for crash logs.

If the master service is simply stopped, the temp directory that is created for routine logs is not deleted so that the logs for one day are bundled together if there is a restart of the master service. This functionality enables the logs that are captured to be reviewed without having to open a zip file and allows for a quicker shutdown and restart of master service because the service does not have to wait to zip files and remove the directory.

Configuring Lumberjack on a Cisco MCS Server

Before You Begin

Read Lumberjack Logging Utility.

  1. Select Start > Run.
    The Run window displays.
  2. Enter regedit.
  3. Change your registry settings for key HKLM\Software\Latitude\MeetingPlace WebPublisher\General\ and for key HKLM\Software\Latitude\MeetingPlace Gateway SIM\General\ as shown in the following table:

Name (Type) Description Data and Default
Key: HKLM\Software\Latitude\MeetingPlace WebPublisher\General\

Server Logging (DWORD)

Enables and disables Lumberjack.

0 - Disabled

1 - Enabled

Default is 1.

Log Crash History (DWORD)

Specifies the number of old crash logs to store.

Default is 10.

Log History (DWORD)

Specifies the number of old routine logs to store.

Default is 15.

Log Location (String)

Specifies where to store the .zip files containing logs.

Default is <install-location>\Cisco Systems\LogFiles.

InstallLocation (String)

Used for gathering .dll, .exe, .map, and .pdb files.

Default is set by Cisco MeetingPlace Web Conferencing.

Key: HKLM\Software\Latitude\MeetingPlace Gateway SIM\General\

InstallLocation (String)

Used for running Gateway SIM eventlog.

Default is set by Gateway SIM.

Manually Generating a Lumberjack Snapshot

Logs gathered because of a manual snapshot request have the format lumberjackSnapshot_<timestamp>.zip.

You can locate these logs either in the default LogFiles folder or in the folder that you specified when you completed the Configuring Lumberjack on a Cisco MCS Server.

Before You Begin

This procedure is completed on the Web Server.

  1. Right-click the Cisco Unified MeetingPlace red door icon.
  2. Select Capture Logs.
    The snapshot log gathering process begins.

Rating: 0.0/5 (0 votes cast)

Personal tools