Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to search the logs of all the servers in the array for a particular string. Specifically, I need to determine if a given user is using OWA, EWS, or something else with our CAS servers.

Is there a simple way for me to search all servers in the CAS Array in parallel?

Since this is mainly an IIS question, and Web Arrays are very common I doubt this is a "new" question but I can't find a similar answer elsewhere.

share|improve this question
1  
Please be a little more descriptive. The W3SVC logs? In a CAS Array? Fill in as much detail as possible –  Mathias R. Jessen Jan 23 '12 at 16:09
    
@JudasIscariot1651 - Updated... I don't think it matters what logs, just looking to search many TXT files in parallel. Would think this is a common need since servers started scaling out –  makerofthings7 Jan 23 '12 at 16:19
add comment

4 Answers

up vote 4 down vote accepted

The two answers are log centralization or remote commands.

See Windows Server Event Log Collection and Analysis for the first and do some searching for Powershell for the second (example: Powershell Remoting: Howto Run a Comand on multiple Machines with individual Parameters?)

share|improve this answer
1  
While there is dedicated software that will parse logs I'd probably write a PowerShell script to create multiple jobs across the farm –  Jim B Jan 23 '12 at 20:14
add comment

When you start needing to cross correlate logs between servers you should really look at a central log server such as Splunk. While it is possible to do so with other products like log parser, grep, etc most are designed for a single file as you have found.

share|improve this answer
add comment

You mean W3C logs, not event logs, right?

LogParser supports the use of multiple log files as input (i.e. *.log works in a FROM clause), so it's just a matter of consolidating the log files (or ensuring that they're accessible), which is usually fairly trivial to script.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.