44.7 Understanding Log File Reports

The following is a log file entry for a single event. Each field in the entry is described below.

"Launch Failure","11","2002-07-25 9:27:52 AM",
"JSMITH.NOVELL.NOVELL_TREE",".WORKSTATION NOT REGISTERED","137.65.45.25","NOTEPAD.APPS.NOVELL.NOVELL_TREE","3054A94E-BBFF-4851-9D8E-58973623B728","2","Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123)","The filename, directory name, or volume label syntax is incorrect.","c:\winnt\notepa","","","","","524288"

Table 44-3 Log File Fields and Descriptions

Field

Example

Description

Event Type

Launch Failure

The event that occurred and whether it was successful or failed. Possible event types are:

Launch Success Launch Failure Distribution Success Distribution Failure Filter Show Filter Hide Uninstall Success Uninstall Failure Cache Success Cache Failure Application Termination Process Ignored Process Terminated

Event Type Code

11

The code associated with the event. Possible codes are:

10 - Launch Success 11 - Launch Failure 20 - Distribution Success 21 - Distribution Failure 30 - Filter Hide 40 - Filter Show 50 - Uninstall Success 51 - Uninstall Failure 60 - Cache Success 61 - Cache Failure 70 - Application Termination 80 - Process Ignored 81 - Process Terminated

Date and Time

2002-07-25 9:27:52 AM

The date (7/25/2002) and time (9:27:52 AM) the event occurred.

User Distinguished Name and Tree

JSMITH.NOVELL.NOVELL_TREE

The distinguished name and tree of the user for which the event occurred.

Workstation Distinguished Name and Tree

.WORKSTATION NOT REGISTERED

The distinguished name and tree of the workstation on which the event occurred. If the workstation has not been imported into eDirectory as a Workstation object, the field contains WORKSTATION NOT REGISTERED.

Workstation Address

137.65.45.25

The IPX or IP address of the workstation on which the event occurred.

Application Distinguished Name and Tree

NOTEPAD.APPS.NOVELL.NOVELL_TREE

The distinguished name and tree of the Application object for which the event occurred.

For rogue processes, this field contains ZEN Process Management.

Application GUID

3054A94E-BBFF-4851-9D8E-58973623B728

The global unique identifier assigned to the Application object. The GUID is located on the Application object's Options page (Distribution Options tab).

For rogue processes, this field is left blank.

Application Version Number

2

The version number assigned to the Application object. Possible numbers range from 0 to 65535. The version number is located on the Application object's Options page (Distribution Options tab).

For rogue processes, this field is left blank.

Error Code Major

Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123)

For failed events, the error code generated by Application Launcher.

For successful events, this field is always 0.

For rogue processes, this field is left blank.

Error Code Minor

The filename, directory name, or volume label syntax is incorrect.

Additional error code information.

For successful events, this field is always 0.

For rogue processes, this field is left blank.

Event String 1

c:\winnt\notepa

Optional event information.

For rogue processes, this field contains the process executable path.

Event String 2

no example

Optional event information.

For rogue processes, this field contains the Original Filename of the process.

Event String 3

no example

Optional event information.

For rogue processes, this field contains the process ID (PID).

Event String 4

no example

Optional event information.

For rogue processes, this field contains the parent process ID (parent PID).

Event String 5

no example

Optional event information.

For rogue processes, this field contains the event action, either “process ignored” or “process terminated successfully.”

Application Flag

524288

Application object bitmask.

For rogue processes, this field is always 0.