Monitoring Event Logs
You can monitor Team Foundation Server events and errors though event logs. Team Foundation Server logs a variety of informational, warning, and error events to the Application Event Log. These events can be viewed with the Event Viewer.
Team Foundation Server Events
You can use Windows Event Viewer to monitor server state changes. Entries in this log indicate critical errors, warnings, and information. The challenge is to understand the impact of a state change and the action required to bring the system back to the normal state.
Team Foundation uses four event log message types: Error, Warning, Audit, and Information. Each of these types indicates different levels of action for the Team Foundation Server administrator.
The following table describes the general classification of Team Foundation Server events.
Event Type |
Event Description |
Event Range |
|---|---|---|
Error |
The error message type indicates an urgent condition. Although not all error events are actionable, all error events should be investigated. Follow the guidance available in the error event message and review the information available in Troubleshooting Team Foundation Server. |
3001 - 5000 |
Warning |
The warning message type indicates a potential problem or issue that might require attention. Warning messages should be reviewed and tracked for patterns over time. |
6001 - 6999 |
Information |
The information message type indicates a state change on the Team Foundation application tier or Team Foundation data-tier server. Information messages do not require any action, but can provide valuable data for monitoring the state of your Team Foundation Server over time. |
9001 - 9999 |
Audit |
The audit message type is only seen in the Security section of the event viewer. A Success Audit message indicates a successful security action, such as a user successfully logging on to the system. A Failure Audit message indicates an unsuccessful security action, such as a user failing to access a server resource. Audit messages should be reviewed for troubleshooting performance and server access problems and for trends over time. |
Audit message event ID numbers are not specific to Team Foundation components |
To view event logs, click Start, click Administrative Tools, and then click Event Viewer on the servers hosting the logical Team Foundation application and data tiers. Additional information about each event can be viewed by double-clicking individual events in the Event Viewer logs.
The following table describes which sections of the event log contain relevant messages for Team Foundation Server on the server running the logical Team Foundation application-tier.
Component |
Event Log Section |
|---|---|
Team Foundation Server |
Application Security (Team Foundation Server service accounts) |
ASP.NET Web services |
Application |
Internet Information Services (IIS) Web services |
Security System |
Windows SharePoint Services |
Application |
SQL Reporting Services |
Security |
The following table describes which sections of the event log contain relevant messages for Team Foundation Server on the server running the logical Team Foundation data-tier.
Component |
Event Log Section |
|---|---|
SQL Server |
Application System Security (Team Foundation Server service accounts) |
Windows Networking |
Security System |
SQL Analysis Services |
Security |
Note
Event ID numbers are separate from Team Foundation error message numbers. When you review the event logs, record both the event ID number and the Team Foundation error message number for reference when troubleshooting any problems.