?
Solved

How to find 404 Errors in IIS logs?

Posted on 2013-11-13
5
Medium Priority
?
521 Views
Last Modified: 2013-11-18
Hello,

I am looking at IIS logs and trying to find "404 Not Found" errors.  I see 404 not found  errors on SharePoint pages.  When I look at the logs, I don't see the error, but they are displayed on pages. What can I look for?
0
Comment
Question by:PBIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39646517
Have you tried searching for "404"?  findstr "404" C:\IIS_log\logfile.log ?
0
 

Author Comment

by:PBIT
ID: 39646551
Yes, but I see 401 which appears to the status. I searched the whole log and there is no 404.

I have an line from the log below.

2013-11-13 22:49:23 VM-SERVER 100.1.4.345 GET /sharepoint/PBTF/default.aspx - 80 - 100.1.2.345 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+WOW64;+Trident/6.0) 401 1 2148074254 7
0
 

Author Comment

by:PBIT
ID: 39646694
I did find some entries with 404 status.  Not sure what they mean, though.

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken
2013-11-14 01:06:45 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 93
2013-11-14 01:06:45 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=0&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 203
2013-11-14 01:06:45 192.1.1.241 GET /tbr client=navclient-auto&iqrn=b3qD&orig=0Arnv&iqst=404&ie=UTF-8&oe=UTF-8&querytime=oK&querytimec=oK&features=Rank:&q=info:http%3a%2f%2fserver.pbtf.com%2fsharepoint%2fPBTF%2fdefault.aspx&googleip=F;173.194.33.179;124&ch=783879886717&fldconns=F;173.194.33.179;1 80 - 192.1.1.230 Mozilla/4.0+(compatible;+GoogleToolbar+7.5.4601.54;+Windows+6.1;+MSIE+9.10.9200.16721) 404 0 0 140
2013-11-14 01:06:51 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:51 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 93
2013-11-14 01:06:51 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 156
2013-11-14 01:06:54 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:54 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 62
2013-11-14 01:06:54 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 93
2013-11-14 01:06:55 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 0
2013-11-14 01:06:55 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 78
2013-11-14 01:06:55 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 62
2013-11-14 01:06:59 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:59 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 1111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 78
2013-11-14 01:06:59 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 62

Open in new window

0
 
LVL 5

Accepted Solution

by:
Dontmilkthis earned 2000 total points
ID: 39646853
I believe what you're seeing is the first attempt is unauthenticated, which is rejected with a 401 status (authentication required), followed by the authenticated request which is resulting in a 404 not found..
The 401 is to be expected from most intranet sites that use windows authentication.

both the 401, and 404 are requesting the following url - /sharepoint/PBTF/default.aspx which mustn't be available?

this then results in a custom error page request to - /tbproxy/lh/fixurl?sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411

which also doesn't appear to be found on the server.

have you had a look in the IIS/sharepoint configuration to make sure /PBTF is still valid?
has this service been moved from another server or the sharepoint site renamed?
0
 

Author Comment

by:PBIT
ID: 39648396
The  URL for /sharepoint/PBTF/default.aspx does exist.  If you wait 10-15 seconds and refreshed the page, then the page comes up.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question