[isalist] Re: Every time i try to configure sql logging...
- From: "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 3 Nov 2006 11:08:51 +1100
Well "you never know your luck in a big city", it might just happen, this
weekend.
A client has requested that I install SQL loging on their ISA2004 server this
weekend.
So i'll capture the screen shots and steps, and write it up.
I'll post next week (if it all works).
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Michael Ross
Sent: Fri 03/Nov/2006 06:32
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Every time i try to configure sql logging...
Here is what would totally rock
someone who is an ace at setting this up, write up a nice, illustrated, How To
article.. :)
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Greg Mulholland
Sent: Wednesday, November 01, 2006 1:56 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Every time i try to configure sql logging...
Yeah that was the plan, to use said tools or to import the log files into sql
for some customized historical reporting.
Thanks
Greg
----- Original Message -----
From: Jim Harrison <mailto:Jim@xxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx
Sent: Thursday, November 02, 2006 12:55 AM
Subject: [isalist] Re: Every time i try to configure sql logging...
Local text logging is *always* cheaper, performance-wise.
No network will beat out a local disk for speed.
No application (read: DSN or ODBC connection) can beat the simplicity
of "dump data to Windows disk buffers".
The disadvantage to text logging is that you lose the historical aspect
of ISA monitoring.
You can make up for this with such kewl tewls as LogParser.
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland
Sent: Wednesday, November 01, 2006 12:08 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Every time i try to configure sql logging...
It seems the steps that you are using are correct. Can you be more
specific about what detail the error messages contain. Does it give you
anything about permissions for odbc connectivity. If i had to bet i would say
that you had name resolution issues which were effecting the connection to the
sql box.
Thor, Jim and Tom and anyone else.. in your environments have you
experienced any great performance hit logging to sql databases. would you
consider logging to text files and rolling the file over to the database at
night or is it not worth it?
Greg
----- Original Message -----
From: Michael Ross <mailto:mross@xxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx
Sent: Wednesday, November 01, 2006 12:30 AM
Subject: [isalist] Re: Every time i try to configure sql
logging...
i was throwing out there the steps i followed. i was hoping for
some to tell me which step , or steps, were incorrect.. not just 'stuff'
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Monday, October 30, 2006 11:08 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Every time i try to configure sql
logging...
"stuff worked, then I did stuff and stuff don't' work" isn't
getting any where.
Engage Tim - he really does know his SQL stuff.
The longer you keep playing with it (and trying unrelated
things), the longer you prolong your agony.
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross
Sent: Monday, October 30, 2006 5:45 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: Every time i try to configure sql
logging...
when i configured webproxy logging, the firewall service would
not start.
i got the error listed in the tech article below. Ive seen this
error before, along with the suggested fix, but could never find that tab ..
Now, lets start from the beginning.. tell me where i went wong.
sql 2005 x64 box setup. I ran the firewall.sql and webproxy.sql
files, following the ISA help instructions
in isa 2004 (sp2), i enabled remote sql logging, and even
created a computer object in to put on the "to" tab.
saved my config.
created a system DSN in ODBC, connecting to the SQL box, and to
the firewall database. tested the connection, and it connected fine.
went to configure firewal logging first.. chose SQL. set the
name of the odbc connection, typed in firewalllog as the table.
set the account properties as domain\user, where user was the
SQL adminitrator account, since I knew this should all "god" type permissions
all over the SQL box.
clicked OK
clicked APPLY.. ISA went thru its stuf.. came back saying a
service couldnt start.
tried to start the firewall service.. nada.
set the logging back to MSDE.. tried to start the firewall
service.. nada. i had to reinstall and restore.
id have to go thru the steps again to give you the specific
errors, but i remember 11004 10427 as a couple event ID numbers.
so, seeing what I did above, before I got the errors.. what did
I forget to do, or to improperly??
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of
God)
Sent: Mon 10/30/2006 6:35 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Every time i try to configure sql
logging...
http://www.ISAserver.org <http://www.isaserver.org/>
-------------------------------------------------------
"Link Translation" is available in Web Publishing rules... Not
sure where
that is coming into play with your SQL logging, tho...
t
On 10/30/06 6:21 PM, "Michael Ross" <mross@xxxxxxxxxxx> spoketh
to all:
> im not ignoring.. i was trying to set up the sql logging so
that i could give
> you the errors i had, when i came across this error.
> where in the world is the link translation tab anyway?
> ive got my unisntall. reinstall. restore from backup file
method down pat now
> LOL
>
> ________________________________
>
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Steve Moffat
> Sent: Mon 10/30/2006 7:18 PM
> To: ISA Mailing List
> Subject: [isalist] Re: Every time i try to configure sql
logging...
>
>
>
> http://www.ISAserver.org <http://www.isaserver.org/>
<http://www.isaserver.org/>
> -------------------------------------------------------
>
> Why are you ignoring Thor....he's the man when it comes to
sql logging......
>
> S
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Michael Ross
> Sent: Monday, October 30, 2006 7:54 PM
> To: ISA Mailing List
> Subject: [isalist] Re: Every time i try to configure sql
logging...
>
> http://www.ISAserver.org <http://www.isaserver.org/>
<http://www.isaserver.org/>
> -------------------------------------------------------
>
> Ok
> I thought I finally had it
> Now I get this error.. And this article says how to fix it..
But I don't
> see a link transition tab
> http://support.microsoft.com/kb/837864/en-us
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Saturday, October 28, 2006 11:38 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Every time i try to configure sql
logging...
>
> http://www.ISAserver.org <http://www.isaserver.org/>
<http://www.isaserver.org/>
> -------------------------------------------------------
>
> We need to know what error you got when ISA tried to log to
the SQL
> database-- specific details...
>
> Without detailed information, we can't effectively
troubleshoot SQL
> logging problems. It could be issues with connectivity (i.e.
Ensuring
> that you have access rules that allow the ISA box to connect
to the SQL
> box via TCP/Names Pipes, etc), permissions on the SQL server,
> user/service logon issues, ODBC/Library configs, name
resolution, etc...
> any number of things, really...
>
> I leverage SQL logging extensively, and am happy to help, but
I need
> more detailed info to do so...
>
> t
>
>
>
>
>
>
> On 10/28/06 6:24 PM, "Michael Ross" <mross@xxxxxxxxxxx>
spoketh to all:
>
>> the error from isa mgmt just said the service couldnt start
the event
>> log gave me a 11004 i think.
>> i had to uninstall and reinstall ISA again last night.
>>
>> ________________________________
>>
>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer
of God)
>> Sent: Sat 10/28/2006 3:09 PM
>> To: isalist@xxxxxxxxxxxxx
>> Subject: [isalist] Re: Every time i try to configure sql
logging...
>>
>>
>> What was the error? If lockdown is enabled, and the
firewall service
> can't
>> log, it will shut down... Let me know what error you're
getting and
> we can
>> go from there...
>> t
>>
>>
>> On 10/27/06 8:10 PM, "Michael Ross" <mross@xxxxxxxxxxx>
spoketh to
> all:
>>
>>
>>
>> ok
>> i finally got the system setup the way i wanted it (isa
2004), minus
>> the sql logging. I wanted to change it from msde to sql
2005, sql 2005
>
>> is on a seperate server.
>> i did a backup of the ISA server config from the ISA manager
(right
>> click the isa server, and choose backup).
>> i created the db's, ran the scripts, followed the help file
to the
> letter.
>> i tried to configure ISA to log to the SQL server, and it
didnt work..
>
>> ISA gave me an error.
>> so, I restored my ISA box from the backup file, and now the
Firewall
>> service wont start.
>> Event ID11004, even after a reboot
>> im about to totally give up on getting it to log to SQL..
The last
>> time this happened, I had to uninstall ISA, reinstall it,
patch it,
> then do my restore.
>> i know im an idiot.. but what in the world am i doing wrong?
>>
>>
>>
>>
>>
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com <http://www.techgenix.com/>
<http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com <http://www.techgenix.com/>
<http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com <http://www.techgenix.com/>
<http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com <http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
All mail to and from this domain is GFI-scanned.
Other related posts:
