Top Server Events

Microsoft.SharePoint.2016.Top_Server_Event_Report (LinkedReport)

This report renders top 20 events raised on specified server(s).

Knowledge Base article:

Summary

This report shows the most common events collected on SharePoint servers during the selected report duration and for given filter parameters

Description:

The Top Server Events report helps to identify high volume events, the agent they originated from and the volume a distinct event contributes to the total number of events. This report is a help in tuning events.

Parameters:

Date/Time Selection: Allows defining a time period for the report with relative or fixed dates. The default is for past 1 month.

Object Picker: Allows selection of Groups or Objects to show Alerts for. Pick SharePoint servers and/or groups containing SharePoint servers.

When using the object picker selecting Add Group will return the Group and all objects it contains. Add Object returns only the selected object.

Source: Allows filtering by the Event Source. The default is all.

Type: Allows filtering by the Event type. The default is all.

N: This numeric value is used to filter the events shown. The default is 20.

Sample Usage:

Scenario: Report on the top 5 events collected from all SharePoint servers for Monday to Friday last week

Instructions: (Parameter selections shown in bold)

Open Top Server Events Report
Select From drop down and choose Previous Week > Monday
Select To drop down choose Previous Week > Friday
Click Add Group
In search box type "Server Group" then click Search
Add all those with type "SharePoint Server Group"
Click OK once complete.
On N parameter change to 5
Click Run to view report.

Report Output:

A chart and table showing the overall most common Events
Per object
Source
Event Log
Event Type
Event ID
Event Count
Activity %
Sample Description

Element properties:

Base	Microsoft.SystemCenter.DataWarehouse.Report.MostCommonEvents
Target	Microsoft.SharePoint.2016.SPServer
Accessibility	Public
Visible	True

Source Code:

<LinkedReport ID="Microsoft.SharePoint.2016.Top_Server_Event_Report" Accessibility="Public" Base="SCDWReport!Microsoft.SystemCenter.DataWarehouse.Report.MostCommonEvents" Visible="true" Target="MOSS16Core!Microsoft.SharePoint.2016.SPServer">

  <ParameterBlock xmlns="http://schemas.microsoft.com/mom/reporting/2007/ReportParameterSettings" columns="8">

    <Controls xmlns="http://schemas.microsoft.com/mom/reporting/2007/ReportParameterSettings">

      <Control rowSpan="3" columnSpan="2" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.RelativeDateTimePicker">

        <ReportParameters>

          <ReportParameter name="TimeZone" binding="TimeZone">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.TimeZone</Prompt>

          </ReportParameter>

          <ReportParameter name="TimeZoneName" binding="TimeZoneName"/>

          <ReportParameter name="StartDate_BaseType" binding="StartDate_BaseType"/>

          <ReportParameter name="StartDate_BaseValue" binding="StartDate_BaseValue">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.StartDateTime</Prompt>

          </ReportParameter>

          <ReportParameter name="StartDate_OffsetType" binding="StartDate_OffsetType"/>

          <ReportParameter name="StartDate_OffsetValue" binding="StartDate_OffsetValue"/>

          <ReportParameter name="EndDate_BaseType" binding="EndDate_BaseType"/>

          <ReportParameter name="EndDate_BaseValue" binding="EndDate_BaseValue">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.EndDateTime</Prompt>

          </ReportParameter>

          <ReportParameter name="EndDate_OffsetType" binding="EndDate_OffsetType"/>

          <ReportParameter name="EndDate_OffsetValue" binding="EndDate_OffsetValue"/>

        </ReportParameters>

      </Control>

      <Control rowSpan="4" columnSpan="3" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.MonitoringObjectXmlPicker">

        <ReportParameters>

          <ReportParameter name="ObjectList">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.ObjectList</Prompt>

          </ReportParameter>

          <ReportParameter name="ManagementGroupId" binding="GroupList"/>

        </ReportParameters>

        <Properties>

          <Property name="ContextObjectBinding">

            <Value>Containment</Value>

          </Property>

        </Properties>

      </Control>

      <Control rowSpan="4" columnSpan="1" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.CheckedListBox">

        <ReportParameters>

          <ReportParameter name="EventSource">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.EventSource</Prompt>

          </ReportParameter>

          <ReportParameter name="EventSourceLookup" binding="Lookup"/>

        </ReportParameters>

      </Control>

      <Control rowSpan="4" columnSpan="2" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.CheckedListBox">

        <ReportParameters>

          <ReportParameter name="EventType">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.EventType</Prompt>

          </ReportParameter>

        </ReportParameters>

      </Control>

      <Control rowSpan="1" columnSpan="1" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.NumericUpDown">

        <ReportParameters>

          <ReportParameter name="EventThreshold">

            <Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.TopAlgorithmParameter</Prompt>

          </ReportParameter>

        </ReportParameters>

        <Properties>

          <Property name="Minimum">

            <Value>1</Value>

          </Property>

          <Property name="Maximum">

            <Value>100</Value>

          </Property>

        </Properties>

      </Control>

    </Controls>

  </ParameterBlock>

  <Parameters>

    <Parameter Name="StartDate_BaseType">

      <Value>Today</Value>

    </Parameter>

    <Parameter Name="StartDate_OffsetType">

      <Value>Month</Value>

    </Parameter>

    <Parameter Name="StartDate_OffsetValue">

      <Value>-1</Value>

    </Parameter>

    <Parameter Name="EndDate_BaseType">

      <Value>Today</Value>

    </Parameter>

    <Parameter Name="EndDate_OffsetType">

      <Value>None</Value>

    </Parameter>

    <Parameter Name="EndDate_OffsetValue">

      <Value>0</Value>

    </Parameter>

    <Parameter Name="EventThreshold">

      <Value>20</Value>

    </Parameter>

  </Parameters>

</LinkedReport>