I need to search the logs of all the servers in the array for a particular string. Specifically, I need to determine if a given user is using OWA, EWS, or something else with our CAS servers.

Is there a simple way for me to search all servers in the CAS Array in parallel?

Since this is mainly an IIS question, and Web Arrays are very common I doubt this is a "new" question but I can't find a similar answer elsewhere.

  • 1
    Please be a little more descriptive. The W3SVC logs? In a CAS Array? Fill in as much detail as possible – Mathias R. Jessen Jan 23 '12 at 16:09
  • @JudasIscariot1651 - Updated... I don't think it matters what logs, just looking to search many TXT files in parallel. Would think this is a common need since servers started scaling out – Christopher Jan 23 '12 at 16:19

The two answers are log centralization or remote commands.

See Windows Server Event Log Collection and Analysis for the first and do some searching for Powershell for the second (example: Powershell Remoting: Howto Run a Comand on multiple Machines with individual Parameters?)

  • 1
    While there is dedicated software that will parse logs I'd probably write a PowerShell script to create multiple jobs across the farm – Jim B Jan 23 '12 at 20:14

When you start needing to cross correlate logs between servers you should really look at a central log server such as Splunk. While it is possible to do so with other products like log parser, grep, etc most are designed for a single file as you have found.


You mean W3C logs, not event logs, right?

LogParser supports the use of multiple log files as input (i.e. *.log works in a FROM clause), so it's just a matter of consolidating the log files (or ensuring that they're accessible), which is usually fairly trivial to script.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.