The Internet Information Services (IIS) Windows Process Activation Service (WAS) configuration manager manages configuration for the application pools and protocol adapters that it maintains. If WAS encounters problems when it reads configuration or reacts to configuration change notifications, configuration changes for the entities it manages may not be processed.
Correct central logging
To correct the central logging configuration, use IIS Manager, then stop and restart the W3SVC to reapply the configuration. If you are not sure which configuration values to use, use the default logging values for IIS that can be found in the <sectionSchema name="system.applicationHost/log"> section of the %SystemDrive%\Windows\System32\inetsrv\config\schema \IIS_Schema.xml file.
View the default IIS logging values
To view the default IIS logging values by using notepad:
Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
Type cd %Windir%\system32\inetsrv\config\schema.
Type notepad IIS_schema.xml
In notepad, search for system.applicationHost/log. The log section and its elements appear. Default values are indicated with the defaultValue attribute.
Configure central logging by using IIS Manager
To configure central logging by using IIS Manager:
Click Start, click Control Panel, and then click Administrative Tools.
Right-click Internet Information Services (IIS) Manager and select Run as administrator.
In the Connections pane, select the computer name.
In Features View, double-click Logging.
Configure the settings on the Logging page, and then click Apply.
Stop and restart the W3SVC
To stop and restart the W3SVC:
Click Start, right-click Computer, and then select Manage.
In Server Manager, expand Configuration.
Click Services and locate World Wide Web Publishing Service in the list of services.
Right-click World Wide Web Publishing Service and select Stop.
Right-click World Wide Web Publishing Service again and select Start.
| Target | Microsoft.Windows.InternetInformationServices.2008.WebServer | ||
| Category | Alert | ||
| Enabled | True | ||
| Event_ID | 5066 | ||
| Event Source | Microsoft-Windows-WAS | ||
| Alert Generate | True | ||
| Alert Severity | Error | ||
| Alert Priority | Normal | ||
| Remotable | True | ||
| Alert Message |
| ||
| Event Log | System |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.Windows.EventProvider | Default |
| WA | WriteAction | Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription | Default |
Home
ENU <Rule ID="Microsoft.Windows.InternetInformationServices.2008.WAS.encountered.an.error.attempting.to.configure.centralized.logging" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.InternetInformationServices.2008.WebServer" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-WAS</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>5066</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.InternetInformationServices.2008.WAS.encountered.an.error.attempting.to.configure.centralized.logging.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>