[isalist] Re: Every time i try to configure sql logging...
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 3 Nov 2006 10:19:39 -0600
http://www.ISAserver.org
-------------------------------------------------------
You should have been to the Microsoft ISA Ninja class in Las Vegas, Tim
went into painful detail on this subject. Would have been well worth the
price of admission!
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan
> Sent: Friday, November 03, 2006 8:18 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Every time i try to configure sql logging...
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Funny you should mention this; we were just talking about trimming our
> database the other day. Trying to figure out how to get this
> "relatively small" database down to the size it should be. I haven't
> had the time to sit down and figure out the actually functions yet
> though.
>
> I'm assuming it is an update statement that rtrims the data, but how
> often do you run it? Would editing an existing entry put the padding
> back in place?
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Thursday, November 02, 2006 10:06 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Every time i try to configure sql logging...
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> You'll still need to "trim" the data with a routine that takes the
> fields
> and "rtrims" the data, as the 2004 ODBC driver fills the fields with
> blanks,
> even with ANSI trimming turned on.
>
> t
>
>
> On 11/2/06 7:51 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx>
> spoketh
> to all:
>
> > I'll be using simple recovery on the DB, daily backups
> using both SQL
> > Maintenance job backups to disk, and CA Brightstor to tape using the
> SQL agent
> > to copy the DB directly to tape + the SQL backup.
> >
> > The daily maintenance job includes skrink DB steps's.
> >
> > The big issue is, they want to have 12 months history on line, even
> though the
> > company is only like 50 people, thats going to be a lot of data.
> >
> > ________________________________
> >
> > From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of God)
> > Sent: Fri 03/Nov/2006 12:12
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Every time i try to configure sql logging...
> >
> >
> >
> > http://www.ISAserver.org <http://www.isaserver.org/>
> > -------------------------------------------------------
> >
> > Well, like Greg said, the data is already out there. I've
> configured
> SQL
> > logging a million times, but without detailed error
> messages (from the
> right
> > process) I can't help.
> >
> > Also, be prepared to have your client adopt a plan for archiving of
> SQL data
> > that includes trimming data. You'll find the db's get quite large,
> quite
> > quickly...
> >
> > t
> >
> >
> > On 11/2/06 5:08 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx>
> spoketh
> > to all:
> >
> >> Well "you never know your luck in a big city", it might just
> happen, this
> >> weekend.
> >>
> >> A client has requested that I install SQL loging on their ISA2004
> server this
> >> weekend.
> >>
> >> So i'll capture the screen shots and steps, and write it up.
> >>
> >> I'll post next week (if it all works).
> >>
> >> ________________________________
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Michael Ross
> >> Sent: Fri 03/Nov/2006 06:32
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >>
> >> Here is what would totally rock
> >> someone who is an ace at setting this up, write up a nice,
> illustrated, How
> >> To
> >> article.. :)
> >>
> >> ________________________________
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> >> Behalf Of Greg Mulholland
> >> Sent: Wednesday, November 01, 2006 1:56 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >>
> >>
> >> Yeah that was the plan, to use said tools or to import the
> log files
> into sql
> >> for some customized historical reporting.
> >>
> >> Thanks
> >> Greg
> >>
> >>
> >> ----- Original Message -----
> >> From: Jim Harrison <mailto:Jim@xxxxxxxxxxxx>
> >> To: isalist@xxxxxxxxxxxxx
> >> Sent: Thursday, November 02, 2006 12:55 AM
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >>
> >> Local text logging is *always* cheaper, performance-wise.
> >>
> >> No network will beat out a local disk for speed.
> >>
> >> No application (read: DSN or ODBC connection) can beat the
> simplicity
> of
> >> "dump
> >> data to Windows disk buffers".
> >>
> >>
> >>
> >> The disadvantage to text logging is that you lose the historical
> aspect of
> >> ISA
> >> monitoring.
> >>
> >> You can make up for this with such kewl tewls as LogParser.
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> >> Behalf Of Greg Mulholland
> >> Sent: Wednesday, November 01, 2006 12:08 AM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >>
> >>
> >>
> >>
> >> It seems the steps that you are using are correct. Can you be more
> specific
> >> about what detail the error messages contain. Does it give you
> anything about
> >> permissions for odbc connectivity. If i had to bet i would say that
> you had
> >> name resolution issues which were effecting the connection
> to the sql
> box.
> >>
> >>
> >>
> >>
> >>
> >> Thor, Jim and Tom and anyone else.. in your environments have you
> experienced
> >> any great performance hit logging to sql databases. would you
> consider
> >> logging
> >> to text files and rolling the file over to the database at night or
> is it not
> >> worth it?
> >>
> >>
> >>
> >> Greg
> >>
> >>
> >>
> >> ----- Original Message -----
> >>
> >> From: Michael Ross <mailto:mross@xxxxxxxxxxx>
> >>
> >> To: isalist@xxxxxxxxxxxxx
> >>
> >> Sent: Wednesday, November 01, 2006 12:30 AM
> >>
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >>
> >>
> >> i was throwing out there the steps i followed. i was
> hoping for some
> to tell
> >> me which step , or steps, were incorrect.. not just 'stuff'
> >>
> >>
> >>
> >> ________________________________
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> >> Behalf Of Jim Harrison
> >> Sent: Monday, October 30, 2006 11:08 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >> "stuff worked, then I did stuff and stuff don't' work"
> isn't getting
> any
> >> where.
> >>
> >> Engage Tim - he really does know his SQL stuff.
> >>
> >> The longer you keep playing with it (and trying unrelated things),
> the longer
> >> you prolong your agony.
> >>
> >>
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> >> Behalf Of Michael Ross
> >> Sent: Monday, October 30, 2006 5:45 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: RE: [isalist] Re: Every time i try to configure sql
> logging...
> >>
> >>
> >>
> >> when i configured webproxy logging, the firewall service would not
> start.
> >>
> >> i got the error listed in the tech article below. Ive seen
> this error
> before,
> >> along with the suggested fix, but could never find that tab ..
> >>
> >>
> >>
> >> Now, lets start from the beginning.. tell me where i went wong.
> >>
> >> sql 2005 x64 box setup. I ran the firewall.sql and webproxy.sql
> files,
> >> following the ISA help instructions
> >>
> >> in isa 2004 (sp2), i enabled remote sql logging, and even created a
> computer
> >> object in to put on the "to" tab.
> >>
> >> saved my config.
> >>
> >> created a system DSN in ODBC, connecting to the SQL box, and to the
> firewall
> >> database. tested the connection, and it connected fine.
> >>
> >> went to configure firewal logging first.. chose SQL. set
> the name of
> the
> >> odbc
> >> connection, typed in firewalllog as the table.
> >>
> >> set the account properties as domain\user, where user was the SQL
> >> adminitrator
> >> account, since I knew this should all "god" type
> permissions all over
> the SQL
> >> box.
> >>
> >> clicked OK
> >>
> >> clicked APPLY.. ISA went thru its stuf.. came back saying a service
> couldnt
> >> start.
> >>
> >> tried to start the firewall service.. nada.
> >>
> >> set the logging back to MSDE.. tried to start the firewall
> service..
> nada. i
> >> had to reinstall and restore.
> >>
> >> id have to go thru the steps again to give you the specific errors,
> but i
> >> remember 11004 10427 as a couple event ID numbers.
> >>
> >>
> >>
> >> so, seeing what I did above, before I got the errors.. what did I
> forget to
> >> do, or to improperly??
> >>
> >>
> >>
> >> ________________________________
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor
> (Hammer of God)
> >> Sent: Mon 10/30/2006 6:35 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Every time i try to configure sql logging...
> >>
> >> http://www.ISAserver.org <http://www.isaserver.org/>
> >> <http://www.isaserver.org/>
> >> -------------------------------------------------------
> >>
> >> "Link Translation" is available in Web Publishing rules... Not sure
> where
> >> that is coming into play with your SQL logging, tho...
> >>
> >> t
> >>
> >>
> >> On 10/30/06 6:21 PM, "Michael Ross" <mross@xxxxxxxxxxx> spoketh to
> all:
> >>
> >>> im not ignoring.. i was trying to set up the sql logging so that i
> could
> >>> give
> >>> you the errors i had, when i came across this error.
> >>> where in the world is the link translation tab anyway?
> >>> ive got my unisntall. reinstall. restore from backup file method
> down pat
> >>> now
> >>> LOL
> >>>
> >>> ________________________________
> >>>
> >>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Steve Moffat
> >>> Sent: Mon 10/30/2006 7:18 PM
> >>> To: ISA Mailing List
> >>> Subject: [isalist] Re: Every time i try to configure sql
> logging...
> >>>
> >>>
> >>>
> >>> http://www.ISAserver.org <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> -------------------------------------------------------
> >>>
> >>> Why are you ignoring Thor....he's the man when it comes to sql
> logging......
> >>>
> >>> S
> >>>
> >>> -----Original Message-----
> >>> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> >>> Behalf Of Michael Ross
> >>> Sent: Monday, October 30, 2006 7:54 PM
> >>> To: ISA Mailing List
> >>> Subject: [isalist] Re: Every time i try to configure sql
> logging...
> >>>
> >>> http://www.ISAserver.org <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> -------------------------------------------------------
> >>>
> >>> Ok
> >>> I thought I finally had it
> >>> Now I get this error.. And this article says how to fix it.. But I
> don't
> >>> see a link transition tab
> >>> http://support.microsoft.com/kb/837864/en-us
> >>>
> >>> -----Original Message-----
> >>> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >>> On Behalf Of Thor (Hammer of God)
> >>> Sent: Saturday, October 28, 2006 11:38 PM
> >>> To: isalist@xxxxxxxxxxxxx
> >>> Subject: [isalist] Re: Every time i try to configure sql
> logging...
> >>>
> >>> http://www.ISAserver.org <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> <http://www.isaserver.org/>
> >>> -------------------------------------------------------
> >>>
> >>> We need to know what error you got when ISA tried to log
> to the SQL
> >>> database-- specific details...
> >>>
> >>> Without detailed information, we can't effectively
> troubleshoot SQL
> >>> logging problems. It could be issues with connectivity (i.e.
> Ensuring
> >>> that you have access rules that allow the ISA box to
> connect to the
> SQL
> >>> box via TCP/Names Pipes, etc), permissions on the SQL server,
> >>> user/service logon issues, ODBC/Library configs, name resolution,
> etc...
> >>> any number of things, really...
> >>>
> >>> I leverage SQL logging extensively, and am happy to help,
> but I need
> >>> more detailed info to do so...
> >>>
> >>> t
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> On 10/28/06 6:24 PM, "Michael Ross" <mross@xxxxxxxxxxx> spoketh to
> all:
> >>>
> >>>> the error from isa mgmt just said the service couldnt start the
> event
> >>>> log gave me a 11004 i think.
> >>>> i had to uninstall and reinstall ISA again last night.
> >>>>
> >>>> ________________________________
> >>>>
> >>>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of
> God)
> >>>> Sent: Sat 10/28/2006 3:09 PM
> >>>> To: isalist@xxxxxxxxxxxxx
> >>>> Subject: [isalist] Re: Every time i try to configure sql
> logging...
> >>>>
> >>>>
> >>>> What was the error? If lockdown is enabled, and the firewall
> service
> >>> can't
> >>>> log, it will shut down... Let me know what error you're getting
> and
> >>> we can
> >>>> go from there...
> >>>> t
> >>>>
> >>>>
> >>>> On 10/27/06 8:10 PM, "Michael Ross" <mross@xxxxxxxxxxx>
> spoketh to
> >>> all:
> >>>>
> >>>>
> >>>>
> >>>> ok
> >>>> i finally got the system setup the way i wanted it (isa 2004),
> minus
> >>>> the sql logging. I wanted to change it from msde to sql 2005, sql
> 2005
> >>>
> >>>> is on a seperate server.
> >>>> i did a backup of the ISA server config from the ISA
> manager (right
> >>>> click the isa server, and choose backup).
> >>>> i created the db's, ran the scripts, followed the help
> file to the
> >>> letter.
> >>>> i tried to configure ISA to log to the SQL server, and it didnt
> work..
> >>>
> >>>> ISA gave me an error.
> >>>> so, I restored my ISA box from the backup file, and now the
> Firewall
> >>>> service wont start.
> >>>> Event ID11004, even after a reboot
> >>>> im about to totally give up on getting it to log to
> SQL.. The last
> >>>> time this happened, I had to uninstall ISA, reinstall
> it, patch it,
> >>> then do my restore.
> >>>> i know im an idiot.. but what in the world am i doing wrong?
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >>> ------------------------------------------------------
> >>> List Archives: //www.freelists.org/archives/isalist/
> >>> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> >>> ISA Server Articles and Tutorials:
> >>> http://www.isaserver.org/articles_tutorials/
> >>> ISA Server Blogs: http://blogs.isaserver.org/
> >>> ------------------------------------------------------
> >>> Visit TechGenix.com for more information about our other sites:
> >>> http://www.techgenix.com <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> ------------------------------------------------------
> >>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >>> Report abuse to listadmin@xxxxxxxxxxxxx
> >>>
> >>> ------------------------------------------------------
> >>> List Archives: //www.freelists.org/archives/isalist/
> >>> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> >>> ISA Server Articles and Tutorials:
> >>> http://www.isaserver.org/articles_tutorials/
> >>> ISA Server Blogs: http://blogs.isaserver.org/
> >>> ------------------------------------------------------
> >>> Visit TechGenix.com for more information about our other sites:
> >>> http://www.techgenix.com <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> ------------------------------------------------------
> >>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >>> Report abuse to listadmin@xxxxxxxxxxxxx
> >>>
> >>> ------------------------------------------------------
> >>> List Archives: //www.freelists.org/archives/isalist/
> >>> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> >>> ISA Server Articles and Tutorials:
> >>> http://www.isaserver.org/articles_tutorials/
> >>> ISA Server Blogs: http://blogs.isaserver.org/
> >>> ------------------------------------------------------
> >>> Visit TechGenix.com for more information about our other sites:
> >>> http://www.techgenix.com <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> <http://www.techgenix.com/>
> >>> ------------------------------------------------------
> >>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >>> Report abuse to listadmin@xxxxxxxxxxxxx
> >>>
> >>>
> >>>
> >>
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com <http://www.techgenix.com/>
> >> <http://www.techgenix.com/>
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >> All mail to and from this domain is GFI-scanned.
> >>
> >> All mail to and from this domain is GFI-scanned.
> >>
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com <http://www.techgenix.com/>
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
