[SDP 3][21382D70-DF1D-4C0C-BDC6-9BA62752E851] Azure Recovery Services Branch to Azure Troubleshooter

Original product version:   Azure Backup
Original KB number:   3037569

The Microsoft Azure Recovery Services troubleshooter collects and analyzes data from Microsoft Azure Recovery Services Branch to Azure scenarios.

More information

This tool should be used as a general data collection tool by Microsoft Support to assist in the collection of multiple logs, debug traces, registry and file data, and the output of various PowerShell cmdlets. Collecting these files individually can be a time-intensive and error-prone process; using this diagnostic makes sure that the Support Professional who's assisting you will have all the data that's typically required to resolve most issues after running this wizard.

This package is for stand-alone Hyper-V servers that have Microsoft Azure Site Recovery Provider for Hyper-V installed. For Azure Recovery Services computers that are protected by Microsoft System Center 2012 R2 Virtual Machine Manager (SC 2012 R2 VMM), use the VMM SDP.

Information collected

Azure Recovery Services Agent logs

Description File name
Azure Recovery Services Agent logs from C:\Program Files\Microsoft Azure Recovery Services Agent\Temp.
{ComputerName}_CBEngineCurr.errlog

Azure Recovery Services ETL trace

Description File name
Decoded Azure Recovery Services ETL trace. File name will be in the format "Azure Recovery ServicesDebug-0001.txt".
{ComputerName}_Azure Recovery Servicesdebug-<RANDOM4DIGITNUMBER>.txt

Azure Recovery Services event logs

Description File name
Application event log for last 7 days in EVTX, CSV and text format. {ComputerName}_evt_Application.[evtx|csv|txt]
System event log for last 7 days in EVTX, CSV and text format. {ComputerName}_evt_System.[evtx|csv|txt]
FailoverClustering log for last 7 days in EVTX, CSV and text format. {ComputerName}_FailoverClustering.[evtx|csv|txt]
Microsoft-VirtualMachineManager-Server/Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_evt_Microsoft-VirtualMachineManager-Server-Admin.[evtx|csv|txt]
Microsoft-VirtualMachineManager-Server/Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_evt_Microsoft-VirtualMachineManager-Server-Operational.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-Config-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-Config-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-Config-Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-Config-Operational.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-EmulatedNic-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-EmulatedNic-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-EmulatedNic-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-Hypervisor-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-Hypervisor-Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-Hypervisor-Operational.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-Integration-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-Integration-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-SynthFc-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-SynthFc-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-SynthNic-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-SynthNic-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-SynthStor-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-SynthStor-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-SynthStor-Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-SynthStor-Operational.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VID-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VID-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VMMS-Admin log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VMMS-Admin.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VMMS-Networking log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VMMS-Networking.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VMMS-Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VMMS-Operational.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VMMS-Storage log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VMMS-Storage.[evtx|csv|txt]
Microsoft-Windows-Hyper-V-VmSwitch-Operational log for last 7 days in EVTX, CSV and text format. {ComputerName}_Microsoft-Windows-Hyper-V-VmSwitch-Operational.[evtx|csv|txt]
VM Manager log for last 7 days in EVTX, CSV and text format. {ComputerName}_evt_VM Manager.[evtx|csv|txt]
Microsoft-Windows-FailoverClustering* (.csv .evtx .txt) {ComputerName}_evt_FailoverClustering.[evtx|csv|txt]

Azure Recovery Services Get-VMReplication Cmdlet Export

Description File name
Azure Recovery Services VM replication state data.
{ComputerName}_Azure Recovery Services_Get-VMReplication.txt

Azure Recovery Services Registry Export

Description File name
Azure Recovery Services job details collected from Azure management portal.
{ComputerName}_{VaultName}*{Date}.zip
Azure Recovery Services Registry settings.
{ComputerName}__Azure Recovery Services_Registry.txt

Best Practices Analyzer

Description File name
Best Practices Analyzer (BPA) Report
{ComputerName}_BPA.htm

Custom uploads

Description File name
Compressed copy of file specified by user
{ComputerName}_filename.zip
Compressed copy of file specified by user
{ComputerName}_filename.zip

Event logs - Networking

Description File name
MicrosoftAzureRecoveryServices/Replication log for last 7 days in EVTX, CSV and text format.
{ComputerName}_MicrosoftAzureRecoveryServices-Replication.[evtx|csv|txt]
Microsoft-Windows-Bits-Client/Operational log for last 7 days in EVTX, CSV and text format.
{ComputerName}_Microsoft-Windows-Bits-Client-Operational.[evtx|csv|txt]
Microsoft-Windows-Bits-CompactServer/Operational log for last 7 days in EVTX, CSV and text format.
{ComputerName}_Microsoft-Windows-Bits-CompactServer-Operational.[evtx|csv|txt]
Microsoft-Windows-WinRM/Operational log for last 7 days in EVTX, CSV and text format.
{ComputerName}_Microsoft-Windows-WinRM-Operational.[evtx|csv|txt]
Microsoft-Windows-WMI-Activity/Operational log for last 7 days in EVTX, CSV and text format.
{ComputerName}_Microsoft-Windows-WMI-Activity-Operational.[evtx|csv|txt]
Windows Remote Management log for last 7 days in EVTX, CSV and text format.
{ComputerName}_Windows Remote Management.[evtx|csv|txt]
Microsoft-Windows-NetworkProfile/Operational* (.csv .evtx .txt)
{ComputerName}_evt_NetworkProfile-Operational.[evtx|csv|txt]

FailoverCluster feature

Description File name
Basic Failover Cluster information via clusmps.exe utility (on operating Systems earlier than Windows Server 2008 R2)
{ComputerName}_cluster_mps_information.txt
Basic Failover Cluster information, including information from existing resources and groups via FailoverCluster PowerShell cmdlets (Windows Server 2008 R2 and newer)
resultreport.xml

Cluster basic Validation Report generated by Test-Cluster PowerShell cmdlet
{ComputerName}_ValidationReport.mht
Cluster Logs generated by Get-ClusterLog PowerShell cmdlet on Windows Server 2008 R2, cluster.exe utility or from \windows\cluster\cluster.log on previous versions of Windows
{ComputerName}_cluster.log
Cluster reports XML files located at \Windows\Cluster\Reports*.xml
{ComputerName}_ClusterReportXML.zip
Cluster Resources information from cluster.exe utility
{ComputerName}_ClusterResources.txt
Cluster resources properties using PowerShell Get-ClusterResource cmdlet or cluster.exe utility on previous versions of Windows
{ComputerName}_ClusterProperties.txt
Cluster validation log files from \Windows\Cluster\Reports\Validate*.log
{ComputerName}_Validate*.log
Cluster validation reports files located at \Windows\Cluster\Reports*.mht
{ComputerName}_ClusterReportMHT.zip
Information about Cluster Shared Volume
{ComputerName}_CSVInfo.HTM

General information

Description File name
Basic System Information including machine name, service pack, computer model and processor name and speed
resultreport.xml

List of Installed Updates and Hotfixes installed
{ComputerName}_Hotfixes.*
List of User Rights (permissions) using showpriv.exe tool
{ComputerName}_UserRights.txt
List of user SID, group memberships, and permissions via the 'Whoami /all' output
{ComputerName}_Whoami.txt
Sysinternals Autoruns utility output
{ComputerName}_Autoruns.*
System Information - MSInfo32 tool output
{ComputerName}_msinfo32.nfo
{ComputerName}_msinfo32.txt

General performance information

Description File name
Information about process and threads using pstat.exe tool
{ComputerName}_PStat.txt

Group Policy results

Description File name
Group Policy Results (gpresults.exe) output in .txt format.
{ComputerName}__GPResult.txt
Group Policy Results (gpresults.exe) output in HTML format.
{ComputerName}_"_GPResult.htm

HotfixRollups

Description File name
Hotfix Rollup Output
{ComputerName}_HotfixRollups.TXT

Hyper-V role

Description File name
Hyper-V Networking Advanced Information
{ComputerName}_Hyper-V-NetworkingInfo.txt

Networking basic information

Description File name
Basic SMB configuration information, such as output of net.exe subcommands, such as net share, net sessions, net use, net accounts, net config
{ComputerName}_SMB-Info.txt
Basic TCP/IP and networking configuration information, such as TCP/IP registry key and outputs from ipconfig, netstat, nbtstat, and netsh commands
{ComputerName}_TcpIp-Info.txt

Registry keys

Description File name
HKLM\Cluster
{ComputerName}_reg_Cluster.hiv
HKLM\System\CurrentControlSet\services\CluDisk
{ComputerName}_reg_ClusDisk.txt
HKLM\System\CurrentControlSet\services\ClusSvc
{ComputerName}_reg_ClusSvc.txt

Server IIS logs

Description File name
Installed Windows roles and features.
{ComputerName}_Roles and Features.txt
Products installed on server.
{ComputerName}_InstalledProducts.txt

Server manager and server roles information

Description File name
List of roles and features installed on Server Media (Windows Server 2008 R2 and newer)
resultreport.xml

SPF OData

Description File name
Resultant set of policies information in text format.
{ComputerName}__GPResult.txt
Resultant set of policies information in HTM format.
{ComputerName}__GPResult.htm

In addition to collecting the information that is described earlier, this diagnostic package can perform the following tasks:

  • Check for event log messages
  • Check whether Cluster Shared Volumes is configured to redirected access
  • Check whether Cluster Shared Volumes is configured for local access
  • Check whether Cluster Shared Volumes is configured to Maintenance Mode
  • Check whether Cluster Shared Volumes is configured to network access
  • Check whether cluster groups are in an Offline or Failed state
  • Check for errors in gathering cluster information through the Get-ClusterNode cmdlet
  • Check whether the state of one or more cluster nodes is down or paused
  • Check whether the Cluster service is not running or offline
  • Check for Best Practices Analyzer errors and warnings

References

For more information about the Microsoft Automated Troubleshooting Services and about the Support Diagnostics Platform, see the following Microsoft Knowledge Base article:

2598970 Information about Microsoft Automated Troubleshooting Services and Support Diagnostic Platform

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure feedback community.