Solved

How to find 404 Errors in IIS logs?

Posted on 2013-11-13
5
459 Views
Last Modified: 2013-11-18
Hello,

I am looking at IIS logs and trying to find "404 Not Found" errors.  I see 404 not found  errors on SharePoint pages.  When I look at the logs, I don't see the error, but they are displayed on pages. What can I look for?
0
Comment
Question by:PBIT
  • 3
5 Comments
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39646517
Have you tried searching for "404"?  findstr "404" C:\IIS_log\logfile.log ?
0
 

Author Comment

by:PBIT
ID: 39646551
Yes, but I see 401 which appears to the status. I searched the whole log and there is no 404.

I have an line from the log below.

2013-11-13 22:49:23 VM-SERVER 100.1.4.345 GET /sharepoint/PBTF/default.aspx - 80 - 100.1.2.345 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+WOW64;+Trident/6.0) 401 1 2148074254 7
0
 

Author Comment

by:PBIT
ID: 39646694
I did find some entries with 404 status.  Not sure what they mean, though.

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken
2013-11-14 01:06:45 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 93
2013-11-14 01:06:45 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=0&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 203
2013-11-14 01:06:45 192.1.1.241 GET /tbr client=navclient-auto&iqrn=b3qD&orig=0Arnv&iqst=404&ie=UTF-8&oe=UTF-8&querytime=oK&querytimec=oK&features=Rank:&q=info:http%3a%2f%2fserver.pbtf.com%2fsharepoint%2fPBTF%2fdefault.aspx&googleip=F;173.194.33.179;124&ch=783879886717&fldconns=F;173.194.33.179;1 80 - 192.1.1.230 Mozilla/4.0+(compatible;+GoogleToolbar+7.5.4601.54;+Windows+6.1;+MSIE+9.10.9200.16721) 404 0 0 140
2013-11-14 01:06:51 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:51 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 93
2013-11-14 01:06:51 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 156
2013-11-14 01:06:54 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:54 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 62
2013-11-14 01:06:54 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 93
2013-11-14 01:06:55 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 0
2013-11-14 01:06:55 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 78
2013-11-14 01:06:55 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 62
2013-11-14 01:06:59 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 - 192.1.1.230 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 401 1 2148074254 15
2013-11-14 01:06:59 192.1.1.241 GET /sharepoint/PBTF/default.aspx - 80 XXXX\user1 1111.1.1.111 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 404 0 0 78
2013-11-14 01:06:59 192.1.1.241 GET /tbproxy/lh/fixurl sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411 80 - 111.1.1.111 - 404 0 0 62

Open in new window

0
 
LVL 5

Accepted Solution

by:
Dontmilkthis earned 500 total points
ID: 39646853
I believe what you're seeing is the first attempt is unauthenticated, which is rejected with a 401 status (authentication required), followed by the authenticated request which is resulting in a 404 not found..
The 401 is to be expected from most intranet sites that use windows authentication.

both the 401, and 404 are requesting the following url - /sharepoint/PBTF/default.aspx which mustn't be available?

this then results in a custom error page request to - /tbproxy/lh/fixurl?sourceid=navclient&url=http%3A%2F%2Fserver.pbtf.com%2Fsharepoint%2FPBTF%2Fdefault.aspx&transition=-1&error=http404&hl=en&sd=com&rlz=1R7GGLS_enUS411

which also doesn't appear to be found on the server.

have you had a look in the IIS/sharepoint configuration to make sure /PBTF is still valid?
has this service been moved from another server or the sharepoint site renamed?
0
 

Author Comment

by:PBIT
ID: 39648396
The  URL for /sharepoint/PBTF/default.aspx does exist.  If you wait 10-15 seconds and refreshed the page, then the page comes up.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Several part series to implement Internet Explorer 11 Enterprise Mode
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

937 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now