Understanding Log File Reports

The following is a log file entry for a single event. Each field in the entry is described below.

"Launch Failure","11","7/25/2002 9:27:52 AM", 
"JSMITH.NOVELL.NOVELL_TREE",".WORKSTATION NOT REGISTERED","137.65.45.25","NOTEPAD.APPS.NOVELL.NOVELL_TREE","3054A94E-BBFF-4851-9D8E-58973623B728","2","Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123)","The filename, directory name, or volume label syntax is incorrect.","c:\winnt\notepa","","","","","524288"
Field Example Description

Event Type

Launch Failure

The event that occurred and whether it was successful or failed. Possible event types are:

Launch Success
Launch Failure
Distribution Success
Distribution Failure
Filter Show
Filter Hide
Uninstall Success
Uninstall Failure
Cache Success
Cache Failure
Application Termination
Process Ignored
Process Terminated

Event Type Code

11

The code associated with the event. Possible codes are:

10 - Launch Success
11 - Launch Failure
20 - Distribution Success
21 - Distribution Failure
30 - Filter Hide
40 - Filter Show
50 - Uninstall Success
51 - Uninstall Failure
60 - Cache Success
61 - Cache Failure
70 - Application Termination
80 - Process Ignored
81 - Process Terminated

Date and Time

7/25/2002 9:27:52 AM

The date (7/25/2002) and time (9:27:52 AM) the event occurred.

User Distinguished Name and Tree

JSMITH.NOVELL.NOVELL_TREE

The distinguished name and tree of the user for which the event occurred.

Workstation Distinguished Name and Tree

.WORKSTATION NOT REGISTERED

The distinguished name and tree of the workstation on which the event occurred. If the workstation has not been imported into eDirectory as a Workstation object, the field contains WORKSTATION NOT REGISTERED.

Workstation Address

137.65.45.25

The IPX or IP address of the workstation on which the event occurred.

Application Distinguished Name and Tree

NOTEPAD.APPS.NOVELL.NOVELL_TREE

The distinguished name and tree of the Application object for which the event occurred.

For rogue processes, this field contains ZEN Process Management.

Application GUID

3054A94E-BBFF-4851-9D8E-58973623B728

The global unique identifier assigned to the Application object. The GUID is located on the Application object's Options page (Distribution Options tab).

For rogue processes, this field is left blank.

Application Version Number

2

The version number assigned to the Application object. Possible numbers range from 0 to 65535. The version number is located on the Application object's Options page (Distribution Options tab).

For rogue processes, this field is left blank.

Error Code Major

Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123)

For failed events, the error code generated by Application Launcher.

For successful events, this field is always 0.

For rogue processes, this field is left blank.

Error Code Minor

The filename, directory name, or volume label syntax is incorrect.

Additional error code information.

For successful events, this field is always 0.

For rogue processes, this field is left blank.

Event String 1

c:\winnt\notepa

Optional event information.

For rogue processes, this field contains the process executable path.

Event String 2

no example

Optional event information.

For rogue processes, this field contains the Original Filename of the process.

Event String 3

no example

Optional event information.

For rogue processes, this field contains the process ID (PID).

Event String 4

no example

Optional event information.

For rogue processes, this field contains the parent process ID (parent PID).

Event String 5

no example

Optional event information.

For rogue processes, this field contains the event action, either "process ignored" or "process terminated successfully."

Application Flag

524288

Application object bitmask.

For rogue processes, this field is always 0.