SHAREPOINT SATURDAY DC 2014 CORRELATION OR BUST TIPS

SHAREPOINT SATURDAY DC 2014 CORRELATION OR BUST? TIPS AND TRICKS FOR TROUBLESHOOTING SHAREPOINT 2010/2013 Toby Mc. Grail Sr. Software Engineer Microlink LLC – A HP Owned Company

THANK YOU EVENT SPONSORS • Please visit them and inquire about their products & services • To win prizes make sure to get your bingo card stamped by ALL sponsors

AGENDA • • • Introduction What are Correlation IDs? Diagnostic Logging Usage and Health Data Collection Health Analyzer Developer Dashboard Tools Power. Shell Commands Demo of Tools Crawl Logs Monitoring Custom Pages • • IIS App Pools and Sites Counters and Thresholds Performance Network Client/Browser Issues Wrap Up Questions?

INTRODUCTION • Toby Mc. Grail – Senior Share. Point Engineer for Microlink LLC – An HP Company. 8 Years Share. Point Experience • Outside of Share. Point I have balanced lifestyle that includes my family, friends, and Fitness and Share. Point are my passion. • Over 20 years IT Experience

WHAT IS A CORRELATION ID? • Correlation Ids are GUIDs assigned to events which transpire during the lifecycle of a resource request. As problems occur, the Correlation Id is commonly surfaced within the context of an error when presented to the person initiating the request or through the Developer Dashboard. • You may have seen a message like the ones below in Share. Point 2010 or 2013 Share. Point 2010 Share. Point 2013

DIAGNOSTIC LOGGING - OVERVIEW • The primary goal of monitoring is to ensure a healthy Share. Point Environment so that you can achieve service performance objectives such as short response time. • You can use the monitoring features from the Share. Point Central Administration and Power. Shell scripts to monitor the Share. Point Environment and services. • Logs and reports track Share. Point Environment and service status. • You can read the logs from the logging database. The advantage of using logging database is that you can configure your view and export the logs to Excel. • The logs and reports from Central Administration help you understand how the Share. Point 2013 system is running, analyze and repair problems, and view metrics for the sites. • Log Levels • Trace Logs • Event Throttling

LOG LEVELS – EVENT LOGGING • • It is important that you choose an appropriate severity level. The severity level of an event is displayed in the Windows Event Log and is used by administrators and registered by monitoring tools to indicate how severe or important an event is. Choosing an appropriate level is a key part of the health and monitoring design for your component or system. Now to the Levels • Critical Error - Events that demand the immediate attention of the system administrator. They are generally directed at the global (system-wide) level, such as System or Application. They can also be used to indicate that an application or system has failed or stopped responding. • Error - Events that indicate problems, but in a category that does not require immediate attention. • Warning -Events that provide forewarning of potential problems; although not a response to an actual error, a warning indicates that a component or application is not in an ideal state and that some further actions could result in a critical error. • Information - Events that pass noncritical information to the administrator, similar to a note that says: "For your information. “ • Verbose - Verbose status, such as progress or success messages.

LOG LEVELS – TRACE (ULS) LOGGING • • When writing a trace log by using the ULS API, you must specify a severity level. The severity level is displayed in the ULS trace log and is commonly used by reporting or filtering tools. For this reason, it is important to choose an appropriate level. Now to the Levels • Unexpected - Similar to an Assert (an assumption in code that a condition is true at a particular point), this message indicates that a logic check failed that is atypical, or the message returns an unexpected error code. These generally represent code bugs that should be investigated and fixed. • Monitorable - Traces that indicate a problem, but do not need immediate investigation. The intent is to collect data and analyze it over time, looking for problem trends. • High - General functional detail, the high priority events that happen in the environment. Examples include global configuration modifications, service start and stop, timer jobs completed, and so on • Medium - Useful to help support or test teams debug customer or environmental issues. These likely include messages indicating that individual features have succeeded or failed, such as creating a new list, modifying a page, and so on. • Verbose - Useful primarily to help developers debug low-level code failures. Not generally useful to anyone who does not have access to source code or symbols. Most event tracing that does not need to be enabled all the time should be set at the Verbose level.

USAGE AND HEALTH DATA COLLECTION • Share. Point stores Usage and Health Information in Files and in a Database. • Consumes disk space and has a huge effect on Performance. Remember that these files can fill up server space if not configured correctly. Always remember to set a limit and don’t make it unlimited or you will see your disk space disappear rapidly • Something that needs to be managed closely and includes: • Health Data Collection – Lots of timer jobs to monitor and maintain • Log Collection – Timer Job to copy events from files into the Database

HEALTH ANALYZER • Identifies possible problems and gives the Farm Admin Possible solutions • Some of the Solutions have the Repair Now however in most cases they don’t work or are not “Best Practices” • Applies a set of rules that can be extended or in most Environments customized to the needs of the Farm • Rules are applied for some of the following categories • Security • Performance • Configuration • Availability • Timer Jobs perform these monitoring tasks and collect the monitoring data • Some of these notifications are not always helpful but more time consuming than anything else • Some of the alerts however are also very useful in finding potential issues that you would only find by monitoring the ULS Logs

DEVELOPER DASHBOARD • Don’t be fooled by the name its more a tool to help you troubleshoot problems and performance issues • Easily Troubleshoot Problems with Page Rendering • Three Types of modes that you need to be aware of • Off - Not Displayed • On – Rendering on Each and Every Page • On. Demand – Hidden until you manually click on the Developer Dashboard Icon • Granular Control on Visibility provided – Users that have Customization permissions by default • Great way to Monitor Custom Code when the Developer uses the SPMonitored. Scope Tag – It’s a great idea to make your solutions use this tag. • Use Power. Shell to enable DD. • $ds= [Microsoft. Share. Point. Administration. SPWeb. Service]: : Content. Service. Developer. D ashboard. Settings $ds. Display. Level = 'On. Demand' $ds. Trace. Enabled = $true $ds. Update()``

DEVELOPER DASHBOARD There are 6 report sections which provide you with lots of stats and data.

TOOLS • Share. Point Management Console • Wireshark • Share. Point Diagnostic Toolkit - SPDiag • Developer Dashboard • PAL – Performance Analysis of Logs • Share. Point Diagnostic Studio • Fiddler • Performance Monitor • ULS Viewer

POWERSHELL COMMANDS • When running updates don’t use the GUI use Power. Shell • PSConfig. exe -cmd upgrade -inplace b 2 b -force -cmd applicationcontent -install -cmd installfeatures • Configure ULS and Data Collection through Power. Shell • Set-SPDiagnostic. Config -Log. Location D: Diagnostic. Logs • Set-SPDiagnostic. Config –Log. Max. Disk. Space. Usage. Enabled • Power. Shell should be your best friend. Its faster and more reliable. Create custom script files to save you time. • Example –Restart SPServices – Custom solution we have built to restart all Share. Point services throughout farm

DEMO OF TOOLS • Share. Point Toolkit/Diagnostic Studio • ULS Viewer • Developer Dashboard • PAL – Performance Analysis of Logs

SHAREPOINT TOOLKIT/DIAGNOSTIC STUDIO • To download the Toolkit go to the following URL • Share. Point 2010 - http: //go. microsoft. com/fwlink/p/? Link. Id=196866 • Share. Point 2013 – Not yet available but supposedly is in the works. Many third party have these available for a small fee. However the 2010 works on 2013. I have used it for about a year without any issues.

ULS VIEWER

CRAWL LOGS • Only visible within the Central Administration Site • Relies on Crawl Log for Search Application • Important to Monitor this log regular so that your crawl is effectively crawling all the content • Remember to Look for Top Level Errors and fix them immediately • Top Level documents especially start addresses • Virtual Servers • Content DB

MONITORING • HTTP “Ping is a useful command but doesn’t help when troubleshooting • Remember Share. Point implements custom error messages. (AKA the Correlation ID error message or the 2013 Error Message (Working on it) • Most common error codes 404 and 401 can be hidden • Develop a page that checks Share. Point Services

CUSTOM PAGES • Create Custom Pages to allow for more in depth logging. • Example HTTP Throttling for Performance Issue • Custom Error Page to help Admin and Support with user with important data • Corraleation ID • Web Front End Server • Time of Error • User affected • Log Name

IIS APP POOLS AND SITES • Common Issues with Share. Point App Pools • IIS Resets not done correctly • No Recycling or Restarting of App Pools • IIS Website is stopped • Create Task to have App Pools recycled daily and restarted once a week. Also have them restart automatically • IIS Logging to see why App Pools and Sites have stopped or is not responding.

COUNTERS AND THRESHOLDS • Processor Utilization – Not to exceed 80 Percent but ideally under 50 Percent • Available Memory – Greater then 10 Percent • Disk Latency Less then 25 MS but ideal situation is 15 MS • SQL Server is more like 10 MS

NETWORK TROUBLESHOOTING • Share. Point is Fast on Server but slow on client • Slow only across VPN Clients • Slow on Server and Client. Communication Issue with SQL Server is most likely the issue • Networking Tools • Microsoft Network Monitoring • Wireshark

CLIENT/BROWSER ISSUES • Is the issue across the network or just one or very few users experience the issues • Make sure that all clients are at Organization approved browser level • Share. Point relies heavily on Java. Script • Older Browser deliver poor user adoption and/or support • IE 9 and IE 10 are much faster and more reliable • Firefox Version 5 or later. Not all Share. Point features work in Firefox

WRAP UP • Know your Environment – Troubleshooting starts here! • Performance Baselines help detect and limit issues and problems • Monitoring is the Key! • Pay attention to Log Files – Both Event and ULS Logs. ULS Viewer should become your best friend next to Power. Shell. • Tools • SPDiag – Helps Troubleshooting Share. Point • PAL – Helps with Server Health • Diagnose one issue at a time!

QUESTIONS • Do you have any issues that you have seen that we have not covered • My Blog • http: //tobymcgrail. com: 2020/SPADMIN • References • PAL – http: //pal. codeplex. com • Share. Point Diagnostic Studio -http: //technet. microsoft. com/enus/library/hh 144782. aspx • Tech. Net • Contact Information: • Toby Mc. Grail – toby@sptoby. com