[LitlGreyCells]

This is a continuation of the SUSTools topic- "Sus Activity Logger"
==========================================

I am submitting my modified/enhanced version of the SUSLogViewer
for your enjoyment.

I have given it a "v1.6" based on the changes/enhancements that have gone before.
(refer to the suslogv_about.txt for version history and detail changes)

(since all my servers at work are behind firewalls, I have put the download
packages on one of my personal sites)

***12/06/2004- v1.6 (725kb) (superceeded by v1.7)
see below for v1.6 additions/enhancements
***Update- 12/22/2004- now v1.7 (731kb) (superceeded by v1.80)
see following posts for v1.7 additions/enhancements
***Update- 12/30/2004- now v1.80 (745kb) (superceeded by v1.81)
see following posts for v1.8 additions/enhancements
***Update- 01/02/2005- now v1.81 (745kb) (superceeded by v1.82)
see following posts for v1.81 (major install location change)
***Update- 03/05/2005- now v1.82 (746kb) (superceeded by v1.83)
see following posts for v1.82 (minor code fixes)

***Update- 06/10/2005- now v1.83 (747kb)
see following posts for v1.83 (minor update)
***Update- 11/10/2005- changed download link...
http://usgenmap.root...om/pgmstuff.htm

also-per Microsoft:
"SUS 1.0 will no longer synchronize or provide new updates after December 6, 2006."
...So need to convert/upgrade to WSUS


=================================
v1.6...
Major items-
Cleaned up the code:
Converted to be closer to W3C (HTML/CSS) standards.
Restuctured/rewrote some of the code so flows/executes better.

New:
Added additional user navigation options.
Added additional user info/messages.
Added About, Install and DNS docs.
also including the ddns.dll package in the zip

Changed:
Only have 1 place in each of the 2 ASP files to change the log path to.
The hardcoded credits at the bottom of the page to a popup window.
Bunches of other tweeks.

also, by cleaning up and restucturing code, I believe I've
addressed/fixed all of the issues mentioned in the forum topic so far.

*

This post has been edited by LitlGreyCells: 10 Nov 2005, 18:33

[drljames]

Just a quick question.

When I click on some logs.. they are nicely formatted but others seem to lose the style sheet?

Is it just me?

[skami]

One problem.. i dono if any one is facing it or not... Iam using SUS on Win2k3 .. every thing is fine untill when i clik a file to view larger then 2 mb ... its give funny page and when it gives java error on SUSLogViewer About ... it works perfectly fine for the file under 1 mb...

[skami]

"One problem.. i dono if any one is facing it or not... Iam using SUS on Win2k3 .. every thing is fine untill when i clik a file to view larger then 2 mb ... its give funny page and when it gives java error on SUSLogViewer About ... it works perfectly fine for the file under 1 mb...


ps just like drljames

[drljames]

I didnt notice the size... but yeah it does only do it when the log is over a certain size

[LitlGreyCells]

I seem to ta'member log size issue mentioned previously in orig topic thread.
I cannot duplicate it with my logs.

Could someone zip up a "problem" log and email it to me?
due to mail filters, change the extension to _ip or zi_

address: --snip...received a test file--

*

This post has been edited by LitlGreyCells: 21 Dec 2004, 21:21

[LitlGreyCells]

I reveived a "problem" log file(30gb)...
did a quick run on my SUS server...got same "unformated" page
put in a counter...there's 9,028 SUS update records in it.

My test file (5.5gb) had 1,875 and worked OK
so looks like memory/storage gets overlayed when the ASP dynamically builds the HTML page.

I put a "limiter" in the ASP....could get to a little over 2100 records before problems started.
Looks like have to split/create multi pages if count gets to over 2000 entries.

Will work on.

*

This post has been edited by LitlGreyCells: 21 Dec 2004, 21:16

[LitlGreyCells]

now available- v1.7
see first post in this topic thread for download link
====================================

Fixed the issue of losing page formatting with large log files.
Was a memory/buffer issue once got past approx 2100 detail records (3.5Mg).
(could not find any documentation on limits/increasing, so...)

...Split the log file detail page into its own ASP and
restructured/rewrote the code to create multi-pages of up to 2,000
records each with a max of 9 pages (18,000 detail records).

Also, redid the filter ASP with the same multi-page processing
and added somemore informational displays on (bottom of) pages.

And- added new "Summary by IP/Name" option:
This will go thru all the log files summarizing all the transactions
and displays the result in IP/name sequence with trans count,
first & last trans dates.
If the last trans date is over a week old, the date will be in red
This also uses the multi-page processing.

NOTE- install instructions have changed, see suslogv_install.txt

*

[Siliconhell]

This is a great script thank you, it does nearly everything I need

I am being asked by our auditor to confirm how many machines have a particular update installed. What % of machines are up to date etc...

Anybody any ideas on hw can achieve this?


Regards

Mike ...

[drljames]

Thanks for this update... works GREAT!!!

[LitlGreyCells]

RE: the large log files issue...
Would you believe (now that I rewrote the client routines) that I found the "fix"
that the buffer limit was running into?

This AM when I did the Other Options: "View Approval Log"...
I got ASP script error "Response Buffer Limit Exceeded".

Searched the other forums and found where the limit is set.

So here it is-
==============
http://www.wsus.info...?showtopic=3572

which mentions/points to...
http://www.emagic-cm....asp?pageId=391

Basics:(for IIS 6 only?)
need to change the "AspBufferingLimit" in the MetaBase.xml file.
(I found it in my W2K3 folder- C:\Windows\system32\inetsrv )

Stop IIS Admin Service

Open the file in a text editor/Notepad,
search for "AspBufferingLimit"

mine was found in section-
<IIsWebService Location ="/LM/W3SVC"

change line-
AspBufferingLimit="4194304"
(which is 4Mb)

to: (I set mine to 16Mb)
8Mb - 8388608
12Mb - 12582912
16Mb - 16777216
(or make larger depending on the amount of physical mem available)

Restart IIS Admin Service and dependant services

====

or periodically print(?) & clear out the Approval log.

*

This post has been edited by LitlGreyCells: 11 Nov 2005, 22:59

[LitlGreyCells]

* WARNING * WARNING * WARNING *

Going thru my log detail entries, I've come across this issue:

Had a PC with these sequential entries:(all times GMT)
Desc.........................Log file Entry Dt/Tm.........Detail Trans Dt/Tm...
Detection-4 items.......12/17/2004 9:55:57 AM....04.12.17.09.55.57.362
Download(ed 4items)..12/17/2004 9:56:39 AM....04.12.17.09.56.39.316
Detection-0 items.......12/22/2004 6:39:06 PM....04.12.22.18.39.06.695
Install(ed 4items).......12/22/2004 6:39:06 PM....04.12.18.08.05.20.863

Notice the last entry...
The date/time it was "stamped" into the log (12/22)
vs the date/time the install actually happened on the PC (12/18).

I happen to know that this PC was up 'n running & into the network at all times.

So for some reason the log entrys can be delayed days/weeks? after the
actual event....which kind of screws up the SUSLogViewer displayed reports.

*

This post has been edited by LitlGreyCells: 22 Dec 2004, 15:32

[zona1117]

Hello,

I am new to SUS and having been fine tunning it for a month. SUS on server and clients are working great. I am trying to use the SUSLog_v17.zip for reporting from the susadmin default site. I have followed all diriection copied the files changed the paths to the correct locations. But when I browse to Http://servername/susadmin/ I am able to view the client monitoring option on the left but unable to view anything when I click on either of the three options. It says the page cannot be found. HTTP 404 - File not found. Has anyone ran into this problem or if anyone can help it would be great. I have spent a day and a half now trying to find my problem and it is getting frustrating. Thanks in advance for any help you can give me.

[LitlGreyCells]

Your connecting from a workstation/client browser?
Try directly from on the server itself?

You edited the asp and put in your proper paths & insured you put the slash on the ends?
(and left the beginning & ending quotes?)

The userid/account your logged in/connected with is in the the servers local
administrators group?

The default website (SUSAdmin) on the SUS server is open to everyone to get to
in read mode. But after that - need admin auth to execute anything.

and the v1.7 instructs also say need write auth to the folder: ie. be an admin

*

This post has been edited by LitlGreyCells: 28 Dec 2004, 22:03

[zona1117]

I have finally got the page not found problem fixed. Now that is taken care of now I have two log files on my server that I would like to view so I click on the view logs on the left side of the susadmin site. I have the path correctly entered in the asp file. It runs through and just keeps working or the globe spins in internet explorer but it never displays anything. The two logs are 2 mb a piece. Any one know why this is happening?

THanks Again for your help.

[LitlGreyCells]

How long did you let it sit 'n run?
...Could be your servers very busy

What kind of connection speed do you have on your session from
wherever to the server admin page?
...could have a "slow" data transfer speed/busy network on your connection.

Does it work if you login at the servers console?

***Addendum 01/02/2005

see following post concerning v1.81

*

This post has been edited by LitlGreyCells: 01 Jan 2005, 12:42

[LitlGreyCells]

***-Concerning server response-***

Since SUS is really running as a "function" of IIS, I found these
couple tuning items for IIS that appears to make my server "happy(er)"

===
Optimize Performance for Background Services
W2000/W2003-
1. Click Start...Settings...Control Panel...System
2. Advanced tab, then click
W2000- Performance Options button...select: Background Services
W2003- Performance Settings button...Advanced Tab...select: Background Services
and then click OK twice
3. Quit Control Panel

===
Maximum data throughput for network applications
W2000/W2003-
1. On the desktop, right-click My Network Places, and then click Properties on the shortcut menu that appears.
2. Right-click the Local Area Connection icon that you want, and then click Properties on the shortcut menu that appears.
3. In the Components checked are used by this connection list,
click (but do not clear its check box) "File and Printer Sharing for Microsoft Networks",
and then click Properties button.
4. Select: "Maximum data throughput for network applications", and then click OK twice.
5. Restart the server for these changes to take effect.

===

[elzschiko]

i use the iis to convert ip -> name and it works fine. but from the older log-files the logviewer shows the ip and not the name.

any idea how to convert the ip -> name from older log-files?

greetz
daniel

LitlGreyCells, on Thu 30th Dec 2004, 11:49 am, said:

***-Concerning server response-***

Since SUS is really running as a "function" of IIS, I found these
couple tuning items for IIS that appears to make my server "happy(er)"

===
Optimize Performance for Background Services
W2000/W2003-
1. Click Start...Settings...Control Panel...System
2. Advanced tab, then click
  W2000- Performance Options button...select: Background Services
  W2003- Performance Settings button...Advanced Tab...select: Background Services
  and then click OK twice
3. Quit Control Panel

===
Maximum data throughput for network applications
W2000/W2003-
1. On the desktop, right-click My Network Places, and then click Properties on the shortcut menu that appears.
2. Right-click the Local Area Connection icon that you want, and then click Properties on the shortcut menu that appears.
3. In the Components checked are used by this connection list,
  click (but do not clear its check box) "File and Printer Sharing for Microsoft Networks",
  and then click Properties button.
4. Select: "Maximum data throughput for network applications", and then click OK twice.
5. Restart the server for these changes to take effect.

===

8256"]<{POST_SNAPBACK}>

[LitlGreyCells]

RE: "any idea how to convert the ip -> name from older log-files?"

Per the install instructs can install the additional dns lookup.
But cannot insure the old IP's are assigned to the same box.

Looks like another "project"...convert the actual logs.

This post has been edited by LitlGreyCells: 31 Dec 2004, 12:19

[LitlGreyCells]

now available- v1.8 (superceeded...also see v1.81)
see first post in this topic thread for download link
====================================

Added new "Extract to CSV" option.
The "Num of Files" value can be:
ALL - will go thru all log files
1 thru 2000 - will go thru the entered value number of files
If greater than 2000, will do (up to) 2000 (ie ALL)
This will go thru the log files, starting with the most current to the oldest
(see the "List Log Files" report for how they get sequenced)
extracting the selected (see the suslogv_install.txt for instructions) detail
transactions to a CSV formatted file (with a column header record).

Then have a "Get" button which opens the created file in "Save As" mode,
so can download/copy from the server to a place of your choosing...
...this leaves the file on the server.
And has a "Delete" button, which then deletes the CSV files from the server.

Also, changed:
Split detail info "Item" into "Item Ver" and "Item ID"
and converted them into a 'human readable form'...
example-
old:
Item: winxp.windowsxp.ver platform win32
nt.5.1.x86.en.ver nt workstation..2600.2.0.com
microsoft.885835 xp sp3 winse 137473.
new:
Item Ver: Windows XP SP2
Item ID: 885835_xp_sp3_winse_137473

Refer to the suslogv_about.txt & suslogv_install.txt for other info/FYI's

This post has been edited by LitlGreyCells: 01 Jan 2005, 12:44