Tip: SharePoint Correlation ID PowerShell Locator

I can't count the number of times I've found myself hunting down a SharePoint Correlation ID on a multi-server SharePoint farm.  If you've been there, you know exactly what a pain it can be.  Even with ULS Viewer tools, locating each log file and consolidating all associated log entries into a single text file can be time consuming.

Assuming you have SharePoint Shell Access, one simple way to deal with this mundane task is to use the Merge-SPLogFile PowerShell cmdlet.  Set up your command, execute, step out for a quick cup of coffee, and return to a text file filtered for your desired Correlation ID or start and stop date times from all SharePoint servers in a farm.

Here are some examples:

Example 1: Use Correlation ID
​Merge-SPLogFile -Path "D:\temp\correlationlog.txt" -Correlation 29b5c483-c48b-4ef2-b4b3-f5e29f635d31

Example 2: Use StartTime and EndTime
Merge-SPLogFile -Path "D:\temp\timelog.txt" -Overwrite -StartTime "11/09/2015 16:00" - EndTime "11/09/2015 16:15"

Example 3:  Need just the last hour?
Merge-SPLogFile -Path "D:\temp\LastHourLog.txt" -Overwrite

You can also look for specific text, service application, area, level and/or user names!

Addtional TechNet Documentation can be found here: https://technet.microsoft.com/en-us/library/ff607721.aspx


No Comments

Add a Comment