11/19/2016 Technical Reference for Log Files in Configuration Manager

Technical Reference for Log Files in

Configuration Manager
 
Updated: May 14, 2015

Applies To: System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP1, System Center
2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager, System Center 2012 R2 Configuration
Manager SP1

In System Center 2012 Configuration Manager, client and site server components record process information in individual
log files. By default, client and server component logging is enabled in Configuration Manager. You can use the information
in these log files to help you troubleshoot issues that might occur in your Configuration Manager hierarchy.

The following sections provide details about the different log files. Use this information to view and monitor Configuration
Manager client and server logs for operation details and identify error information that might help you to troubleshoot any
problems.

About Configuration Manager Log Files

Configure Logging Options by Using the Configuration Manager Service Manager

Locating Configuration Manager Logs

Configuration Manager Client Logs

Client Operations

Client Installation Log Files

Client for Linux and UNIX

Client for Mac Computers

Configuration Manager Site Server Log Files

Site Server and Site System Server Logs

Site Server Installation Log Files

Fallback Status Point Logs Files

Management Point Logs Files

Software Update Point Log Files

Log Files for Configuration Manager Functionality

Application Management

Asset Intelligence

Backup and Recovery

Client Notification

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 1/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Certificate Enrollment

Compliance Settings and Company Resource Access

Configuration Manager Console

Content Management

Discovery

Endpoint Protection

Extensions

Inventory

Metering

Migration

Mobile Devices

Operating System Deployment

Out of Band Management

Power Management

Remote Control

Reporting

Role‐Based Administration

Software Updates and Network Access Protection

Wake On LAN

Microsoft Intune Connector

Windows Update Agent

WSUS Server

About Configuration Manager Log Files

By default, most processes in Configuration Manager write operational information to a log file that is dedicated to that
process. These log files are identified by the .LOG or .LO_ extension. Configuration Manager writes to the .LOG file until
that log reaches it maximum size. When the log is full, the .LOG file is copied to a file of the same name but with the .LO_
extension, and the process or component continues to write to the .LOG file. When the .LOG file again reaches its
maximum size, the .LO_ file is overwritten and the process repeats. Some components establish a log file history by
appending a date and time stamp to the log file name and by retaining the .LOG extension. An exception to the maximum
size and use of the .LO_ file is the client for Linux and UNIX. For information about how the client for Linux and UNIX uses
log files, see Manage Log Files for the Client for Linux and UNIX in the Client for Linux and UNIX section in this topic.

To view the logs, you can use the Configuration Manager log viewer tool, CMTrace, which is located in the
\SMSSETUP\TOOLS folder of the System Center 2012 Configuration Manager source media. The CMTrace tool is also
added to all boot images that are added to the Software Library.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 2/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

What’s New in Configuration Manager

The Configuration Manager 2007 log viewer tool, Trace32, is now replaced with CMTrace.

Configure Logging Options by Using the Configuration Manager Service Manager

Configuration Manager supports options that enable you to change where log files are stored and the log file size.

Use the following procedure to use the Configuration Manager Service Manager to modify the size of log files, the
name and location of the log file, and to force multiple components to write to a single log file.

To modify logging for a component:

1. In the Configuration Manager console, click Monitoring, click System Status, and then click either Site Status or
Component Status.

2. On the Home tab, in the Component group, click Start and select Configuration Manager Service Manager.

3. When the Configuration Manager Service Manager opens, connect to the site that you want to manage.

If you do not see the site that you want to manage, click Site, click Connect, and then enter the name of the site
server for the correct site.

4. Expand the site and navigate to Components or Servers, depending on where the components that you want to
manage are located.

5. In the right pane, select one or more components.

6. On the Component menu, click Logging.

7. In the Configuration Manager Component Logging dialog box, complete the available configuration options for
your selection.

8. Click OK to save the configuration.

Locating Configuration Manager Logs

By default, Configuration Manager log files are stored in a variety of locations that depend on the process that creates the
log file, and on the configuration of your site systems. Because the location of the log on a given computer can vary, use
search to locate the relevant log files on your Configuration Manager computers to help you troubleshoot a specific
scenario.

Configuration Manager Client Logs

The following sections list the log files related to client operations, and client installation.

Client Operations
The following table lists the log files found on the Configuration Manager client.

Log name Description

CAS.log Content Access service. Maintains the local package cache on the client.

Ccm32BitLaunc Records actions for starting applications on the client marked as "run as 32bit".
her.log

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 3/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

CcmEval.log Records Configuration Manager client status evaluation activities and details for components that
are required by the Configuration Manager client.

CcmEvalTask.log Records the Configuration Manager client status evaluation activities that are initiated by the
evaluation scheduled task.

CcmExec.log Records activities of the client and the SMS Agent Host service. This log file also includes
information about enabling and disabling wake‐up proxy.

CcmMessaging.l Records activities related to communications between the client and management points.
og

CCMNotification Records activities related to client notification operations.

Agent.log

Ccmperf.log Records activities related to the maintenance and capture of data related to client performance
counters.

CcmRestart.log Records client service restart activity.

CCMSDKProvide Records activities for the client SDK interfaces.

r.log

CertificateMaint Maintains certificates for Active Directory Domain Services and management points.
enance.log

CIDownloader.lo Records details about configuration item definition downloads.

g

CITaskMgr.log Records tasks that are initiated for each application and deployment type, such as content
download or install or uninstall actions.

ClientAuth.log Records the signing and authentication activity for the client.

ClientIDManage Creates and maintains the client GUID and identifies tasks performed during client registration and
rStartup.log assignment.

ClientLocation.l Records tasks that are related to client site assignment.

og

CMHttpsReadin Records the results of running the Configuration Manager HTTPS Readiness Assessment Tool. This
ess.log tool checks whether computers have a PKI client authentication certificate that can be used for
Configuration Manager.

CmRcService.log Records information for the remote control service.

ContentTransfer Schedules the Background Intelligent Transfer Service ﴾BITS﴿ or the Server Message Block ﴾SMB﴿ to
Manager.log download or to access packages.

DataTransferSer Records all BITS communication for policy or package access.

vice.log

EndpointProtect Records information about the installation of the Endpoint Protection client and the application of
ionAgent antimalware policy to that client.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 4/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

execmgr.log Records details about packages and task sequences that run on the client.

ExpressionSolve Records details about enhanced detection methods that are used when verbose or debug logging
r.log is enabled.

ExternalEventAg Records the history of Endpoint Protection malware detection and events related to client status.
ent.log

FileBITS.log Records all SMB package access tasks.

FileSystemFile.lo Records the activity of the Windows Management Instrumentation ﴾WMI﴿ provider for software
g inventory and file collection.

FSPStateMessag Records the activity for state messages that are sent to the fallback status point by the client.
e.log

InternetProxy.lo Records the network proxy configuration and usage activity for the client.
g

InventoryAgent.l Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the
og client.

LocationCache.l Records the activity for location cache usage and maintenance for the client.
og

LocationServices Records the client activity for locating management points, software update points, and distribution
.log points.

MaintenanceCo Records the activity for general maintenance task activity for the client.
ordinator.log

Mifprovider.log Records the activity of the WMI provider for .MIF files.

mtrmgr.log Monitors all software metering processes.

PolicyAgent.log Records requests for policies made by using the Data Transfer service.

PolicyAgentProv Records policy changes.

ider.log

PolicyEvaluator.l Records details about the evaluation of policies on client computers, including policies from
og software updates.

PolicyPlatformCl Records the process of remediation and compliance for all providers located in %Program
ient.log Files%\Microsoft Policy Platform, except the file provider.

PolicySdk.log Records activities for policy system SDK interfaces.

Pwrmgmt.log Records information about enabling or disabling and configuring the wake‐up proxy client settings.

PwrProvider.log Records the activities of the power management provider ﴾PWRInvProvider﴿ hosted in the Windows
Management Instrumentation ﴾WMI﴿ service. On all supported versions of Windows, the provider
enumerates the current settings on computers during hardware inventory and applies power plan
settings.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 5/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

SCClient_<doma Records the activity in Software Center for the specified user on the client computer.
in>@<usernam
e>_1.log

SCClient_<doma Records the historical activity in Software Center for the specified user on the client computer.
in>@<usernam
e>_2.log

Scheduler.log Records activities of scheduled tasks for all client operations.

SCNotify_<dom Records the activity for notifying users about software for the specified user.
ain>@<userna
me>_1.log

SCNotify_<dom Records the historical information for notifying users about software for the specified user.
ain>@<userna
me>_1‐
<date_time>.lo
g

setuppolicyeval Records configuration and inventory policy creation in WMI.

uator.log

SleepAgent_<d Main log file for wake‐up proxy.

omain>@<@SY
STEM_0.log

smscliui.log Records usage of the Configuration Manager client in Control Panel.

SrcUpdateMgr.l Records activity for installed Windows Installer applications that are updated with current
og distribution point source locations.

StatusAgent.log Records status messages that are created by the client components.

SWMTRReportG Generates a usage data report that is collected by the metering agent. This data is logged in
en.log Mtrmgr.log.

UserAffinity.log Records details about user device affinity.

VirtualApp.log Records information specific to the evaluation of App‐V deployment types.

Wedmtrace.log Records operations related to write filters on Windows Embedded clients.

wakeprxy‐ Records installation information when clients receive the client setting option to enable wake‐up
install.log proxy.

wakeprxy‐ Records information about uninstalling wake‐up proxy when clients receive the client setting option
uninstall.log to disable wake‐up proxy, if wake‐up proxy was previously enabled.

Client Installation Log Files

The following table lists the log files that contain information related to the installation of the Configuration Manager
client.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 6/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Log name Description

ccmsetup.log Records ccmsetup tasks for client setup, client upgrade, and client removal. Can be used to
troubleshoot client installation problems.

ccmsetup‐ Records ccmsetup tasks for client status and remediation.

ccmeval.log

CcmRepair.log Records the repair activities of the client agent.

client.msi.log Records setup tasks performed by client.msi. Can be used to troubleshoot client installation or
removal problems.

Client for Linux and UNIX

For System Center 2012 Configuration Manager SP1 and later:

The Configuration Manager client for Linux and UNIX records information in the following log files.

Tip

Beginning with client for Linux and UNIX from cumulative update 1, you can use CMTrace to view the log files for the
client for Linux and UNIX.

Note

When you use the initial release of the client for Linux and UNIX and reference the documentation in this section,
replace the following references for each file or process:

Replace omiserver.bin with nwserver.bin

Replace omi with nanowbem

Log name Details

scxcm.log This is the log file for the core service of the Configuration Manager client for Linux and UNIX
﴾ccmexec.bin﴿. This log file contains information about the installation and ongoing operations of
ccmexec.bin.

By default, this log file is created in the following location: /var/opt/microsoft/scxcm.log

To change the location of the log file, edit /opt/microsoft/configmgr/etc/scxcm.conf and change
the PATH field. You do not need to restart the client computer or service for the change to take effect.

You can set the log level to one of four different settings:

ERROR: Indicates problems that require attention.

WARNING: Indicates possible problems for the client operations.
INFO: More detailed logging that indicates the status of various events on the client.
TRACE: Verbose logging that is typically used to diagnose problems.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 7/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

To change the log level, edit /opt/microsoft/configmgr/etc/scxcm.conf and change each instance
of the tag MODULE to the desired log level.

scxcmprovide This is the log file for the CIM service of the Configuration Manager client for Linux and UNIX
r.log ﴾omiserver.bin﴿. This log file contains information about the ongoing operations of nwserver.bin.

By default, this log is created in the following location:

/var/opt/microsoft/configmgr/scxcmprovider.log

To change the location of the log file, edit /opt/microsoft/omi/etc/scxcmprovider.conf and change
the PATH field. You do not need to restart the client computer or service for the change to take effect.

You can set the log level to one of three different settings:

ERROR: Indicates problems that require attention.

WARNING: Indicates possible problems for the client operations.
INFO: More detailed logging that indicates the status of various events on the client.

To change the log level, edit /opt/microsoft/omi/etc/scxcmprovider.conf and change each instance
of the tag MODULE to the desired log level.

Under normal operating conditions the ERROR log level should be used. The ERROR level of logging creates the smallest
log file. As the log level is increased from ERROR to WARNING to INFO to TRACE, each step results in a larger log file as
more data is written to the log file.

Manage Log Files for the Client for Linux and UNIX Client
The client for Linux and UNIX does not limit the maximum size of the client log files, nor does the client automatically copy
the contents of its .LOG files to another file such as a .LO_ file. If you want to control the maximum size of log files,
implement a process to manage the log files independent from the Configuration Manager client for Linux and UNIX.

For example, you can use the standard Linux and UNIX command logrotate to manage the size and rotation of the clients
log files. The Configuration Manager client for Linux and UNIX provides an interface that enables logrotate to signal the
client as to when the log rotation completes, allowing the client to resume logging to the log file.

For information about logrotate, see the documentation for the Linux and UNIX distributions that you use.

Client for Mac Computers

For System Center 2012 Configuration Manager SP1 and later:

The Configuration Manager client for Mac computers records information in the following log files.

Log name Details

CCMClient‐ Records activities that are related to the Mac client operations, which includes application
<date_time>.log management, inventory, and error logging.

This log file is located in the folder /Library/Application Support/Microsoft/CCM/Logs on

the Mac computer.

CCMAgent‐ Records information that is related to client operations, which includes user logon and logoff
<date_time>.log operations and Mac computer activity.

This log file is located in the folder ~/Library/Logs on the Mac computer.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 8/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

CCMNotifications‐ Records activities that are related to Configuration Manager notifications displayed on the Mac
<date_time>.log computer.

This log file is located in the folder ~/Library/Logs on the Mac computer.

CCMPrefPane‐ Records activities related to the Configuration Manager preferences dialog box on the Mac
<date_time>.log computer, which includes general status and error logging.

This log file is located in the folder ~/Library/Logs on the Mac computer.

Additionally, the log file SMS_DM.log on the site system server records communication between Mac computers and the
management point that is enabled for mobile devices and Mac computers.

Configuration Manager Site Server Log Files

The following sections list log files found on the site server or related to specific site system roles.

Site Server and Site System Server Logs

The following table lists the log files found on the Configuration Manager site server and site system servers.

Log name Description Computer with log file

Records enrollment processing activity. Site server

adctrl.log

ADForestDisc. Records Active Directory Forest Discovery actions. Site server

log

ADService.log Records account creation and security group details in Active Site server
Directory.

Records Active Directory Group Discovery actions. Site server

adsgdis.log

adsysdis.log Records Active Directory System Discovery actions. Site server

adusrdis.log Records Active Directory User Discovery actions. Site server

ccm.log Records client push installation activities. Site server

CertMgr.log Records the certificate activities for intra‐site communications. Site system server

chmgr.log Records activities of the client health manager. Site server

Cidm.log Records changes to the client settings by the Client Install Site server
Data Manager ﴾CIDM﴿.

colleval.log Records details about when collections are created, changed, Site server
and deleted by the Collection Evaluator.

compmon.log Site system server

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 9/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Records the status of component threads monitored for the

site server.

compsumm.l Records Component Status Summarizer tasks. Site server

og

ComRegSetu Records the initial installation of COM registration results for Site system server
p.log a site server.

dataldr.log Records information about the processing of Management Site Server

Information Format ﴾MIF﴿ files and hardware inventory in the
Configuration Manager database.

ddm.log Records activities of the discovery data manager. Site server

despool.log Records incoming site‐to‐site communication transfers. Site server

distmgr.log Records details about package creation, compression, delta Site server
replication, and information updates.

EPCtrlMgr.log Records information about the synchronization of malware Site server

threat information from the Endpoint Protection site system
role server into the Configuration Manager database.

EPMgr.log Records the status of the Endpoint Protection site system role. Site system server

EPSetup.log Provides information about the installation of the Endpoint Site system server
Protection site system role.

EnrollSrv.log Records activities of the enrollment service process. Site system server

EnrollWeb.log Records activities of the enrollment website process. Site system server

fspmgr.log Records activities of the fallback status point site system role. Site system server

hman.log Records information about site configuration changes, and Site server
the publishing of site information in Active Directory
Domain Services.

Inboxast.log Records the files that are moved from the management point Site server
to the corresponding INBOXES folder on the site server.

inboxmgr.log Records file transfer activities between inbox folders. Site server

inboxmon.log Records the processing of inbox files and performance Site server
counter updates.

invproc.log Records the forwarding of MIF files from a secondary site to Site server
its parent site.

migmctrl.log Records information for Migration actions involving migration The top‐level site in the
jobs, shared distribution points, and distribution point System Center 2012
upgrades. Configuration Manager hierarchy,
and each child primary site

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 10/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Note

In a multi‐primary site hierarchy,

use the log file created at the
central administration site.

mpcontrol.lo Records the registration of the management point with WINS. Site system server
g Records the availability of the management point every 10
minutes.

mpfdm.log Records the actions of the management point component Site system server
that moves client files to the corresponding INBOXES folder
on the site server.

mpMSI.log Records details of about the management point installation. Site server

MPSetup.log Records the management point installation wrapper process. Site server

netdisc.log Records Network Discovery actions. Site server

ntsvrdis.log Records the discovery activity of site system servers. Site server

Objreplmgr Records the processing of object change notifications for Site server
replication.

offermgr.log Records advertisement updates. Site server

offersum.log Records the summarization of deployment status messages. Site server

OfflineServici Records the activities of applying updates to operating Site server

ngMgr.log system image files.

outboxmon.l Records the processing of outbox files and performance Site server
og counter updates.

PerfSetup.log Records the results of the installation of performance Site system server
counters.

PkgXferMgr.l Records the actions of the SMS Executive component that is Site server
og responsible for sending content from a primary site to a
remote distribution point.

policypv.log Records updates to the client policies to reflect changes to Primary site server
client settings or deployments.

rcmctrl.log Records the activities of database replication between sites in Site server
the hierarchy.

replmgr.log Records the replication of files between the site server Site server
components and the Scheduler component.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 11/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

ResourceExpl Records errors, warnings, and information about running the The computer that runs the
orer.log Resource Explorer. Configuration Manager console

ruleengine.lo Records details about automatic deployment rules for the Site server
g identification, content download, and software update group
and deployment creation.

schedule.log Records details about site‐to‐site job and file replication. Site server

sender.log Records the files that transfer by file‐based replication Site server
between sites.

sinvproc.log Records information about the processing of software Site server

inventory data to the site database.

sitecomp.log Records details about the maintenance of the installed site Site server
components on all site system servers in the site.

sitectrl.log Records site setting changes made to site control objects in Site server
the database.

sitestat.log Records the availability and disk space monitoring process of Site server
all site systems.

SmsAdminUI.l Records Configuration Manager console activity. The computer that runs the
og Configuration Manager console

SMSAWEBSV Records the installation activities of the Application Catalog Site system server
CSetup.log web service.

smsbkup.log Records output from the site backup process. Site server

smsdbmon.lo Records database changes. Site server

g

SMSENROLLS Records the installation activities of the enrollment web Site system server
RVSetup.log service.

SMSENROLL Records the installation activities of the enrollment website. Site system server
WEBSetup.lo
g

smsexec.log Records the processing of all site server component threads. Site server or site system server

SMSFSPSetup Records messages generated by the installation of a fallback Site system server
.log status point.

SMSPORTAL Records the installation activities of the Application Catalog Site system server
WEBSetup.lo website.
g

SMSProv.log Records WMI provider access to the site database. Computer with the SMS Provider

srsrpMSI.log Records detailed results of the reporting point installation Site system server
process from the MSI output.
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 12/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

srsrpsetup.lo Records results of the reporting point installation process. Site system server
g

statesys.log Records the processing of state system messages. Site server

statmgr.log Records the writing of all status messages to the database. Site server

swmproc.log Records the processing of metering files and settings. Site server

Site Server Installation Log Files

The following table lists the log files that contain information related to site installation.

Computer
Log name Description
with log file

ConfigMgrPr Records pre‐requisite component evaluation and installation activities. Site server
ereq.log

ConfigMgrSet Records detailed output from site server setup. Site Server
up.log

ConfigMgrSet Records information related to activity in the Setup wizard. Site Server
upWizard.log

SMS_BOOTST Records information about the progress of launching the secondary site installation Site Server
RAP.log process. Details of the actual setup process are contained in ConfigMgrSetup.log.

smstsvc.log Records information about the installation, use, and removal of a Windows service Site server
that is used to test network connectivity and permissions between servers, using the and site
computer account of the server initiating the connection. systems

Fallback Status Point Logs Files

The following table lists the log files that contain information related to the fallback status point.

Computer
Log name Description
with log file

FspIsapi Records details about communications to the fallback status point from mobile Site system
device legacy clients and client computers. server

fspMSI.log Records messages generated by the installation of a fallback status point. Site system
server

fspmgr.log Records activities of the fallback status point site system role. Site system
server

Management Point Logs Files

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 13/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

The following table lists the log files that contain information related to the management point.

Computer
Log name Description
with log file

CcmIsapi.log Records client messaging activity on the endpoint. Site system

server

MP_CliReg.lo Records the client registration activity processed by the management point. Site system
g server

MP_Ddr.log Records the conversion of XML.ddr records from clients, and copies them to the site Site system
server. server

MP_Framewo Records the activities of the core management point and client framework Site system
rk.log components. server

MP_GetAuth.l Records client authorization activity. Site system

og server

MP_GetPolicy Records policy request activity from client computers. Site system
.log server

MP_Hinv.log Records details about the conversion of XML hardware inventory records from clients Site system
and the copy of those files to the site server. server

MP_Location.l Records location request and reply activity from clients. Site system
og server

MP_OOBMgr. Records the management point activities related to receiving OTP from a client. Site system
log server

MP_Policy.log Records policy communication. Site system

server

MP_Relay.log Records the transfer of files that are collected from the client. Site system
server

MP_Retry.log Records the hardware inventory retry processes. Site system

server

MP_Sinv.log Records details about the conversion of XML software inventory records from clients Site system
and the copy of those files to the site server. server

MP_SinvCollFi Records details about file collection. Site system

le.log server

MP_Status.lo Records details about the conversion of XML.svf status message files from clients and Site system
g the copy of those files to the site server. server

mpcontrol.lo Records the registration of the management point with WINS. Records the Site server
g availability of the management point every 10 minutes.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 14/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

mpfdm.log Records the actions of the management point component that moves client files to Site system
the corresponding INBOXES folder on the site server. server

mpMSI.log Records details of about the management point installation. Site server

MPSetup.log Records the management point installation wrapper process. Site server

Software Update Point Log Files

he following table lists the log files that contain information related to the software update point.

Log name Description Computer with log file

objreplmgr.lo Records details about the replication of software updates Site server
g notification files from a parent to child sites.

PatchDownlo Records details about the process of downloading software The computer hosting the
ader.log updates from the update source to the download destination on Configuration Manager console
the site server. from which downloads are
initiated

ruleengine.lo Records details about automatic deployment rules for the Site server
g identification, content download, and software update group and
deployment creation.

SUPSetup.log Records details about the software update point installation. Site system server
When the software update point installation completes,
Installation was successful is written to this log file.

WCM.log Records details about the software update point configuration Site server that connects to the
and connections to the Windows Server Update Services ﴾WSUS﴿ Windows Server Update Services
server for subscribed update categories, classifications, and ﴾WSUS﴿ server
languages.

WSUSCtrl.log Records details about the configuration, database connectivity, Site system server
and health of the WSUS server for the site.

wsyncmgr.log Records details about the software updates synchronization Site system server
process.

WUSSyncXML Records details about the Inventory Tool for the Microsoft The client computer configured
.log Updates synchronization process. as the synchronization host for
the Inventory Tool for Microsoft
Updates.

Log Files for Configuration Manager Functionality

The following sections list log files related to the different functions in Configuration Manager.

Application Management
The following table lists the log files that contain information related to Application Management.
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 15/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Computer
Log name Description
with log file

AppIntentEval.lo Records details about the current and intended state of applications, their Client
g applicability, whether requirements were met, deployment types, and
dependencies.

AppDiscovery.lo Records details about the discovery or detection of applications on client Client
g computers. 

AppEnforce.log Records details about enforcement actions ﴾install and uninstall﴿ taken for Client
applications on the client.

awebsctl.log Records the monitoring activities for the Application Catalog web service point Site system
site system role. server

awebsvcMSI.log Records detailed installation information for the Application Catalog web service Site system
point site system role. server

Ccmsdkprovider.l Records the activities of the application management SDK. Client

og

colleval.log Records details about when collections are created, changed, and deleted by the Site system
Collection Evaluator. server

ConfigMgrSoftw Records the activity of the Application Catalog, which includes its use of Client
areCatalog.log Silverlight.

portlctl.log Records the monitoring activities for the Application Catalog website point site Site system
system role. server

portlwebMSI.log Records the MSI installation activity for the Application Catalog website role. Site system
server

PrestageContent. Records the details about the use of the ExtractContent.exe tool on a remote Site system
log prestaged distribution point. This tool extracts content that has been exported to server
a file.

ServicePortalWeb Records the activity of the Application Catalog web service. Site system
Service.log server

ServicePortalWeb Records the activity of the Application Catalog website. Site system
Site.log server

SMSdpmon.log Records details about the distribution point health monitoring scheduled task Site server
that is configured on a distribution point.

SoftwareCatalog Records the activities for managing the URL for the Application Catalog shown in Client
UpdateEndpoint.l Software Center.
og

Records the activities for Software Center prerequisite component validation. Client
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 16/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

SoftwareCenterS
ystemTasks.log

The following table lists the log files that contain information related to deploying packages and programs.

Computer with
Log name Description
log file

colleval.log Records details about when collections are created, changed, and deleted by the Site server
Collection Evaluator.

execmgr.log Records details about packages and task sequences that run. Client

Asset Intelligence
The following table lists the log files that contain information related to Asset Intelligence.

Computer
Log Name Description
with Log File

AssetAdvisor.l Records the activities of Asset Intelligence inventory actions. Client

og

aikbmgr.log Records details about the processing of XML files from the inbox for updating the Site server
Asset Intelligence catalog.

AIUpdateSvc.l Records the interaction of the Asset Intelligence synchronization point with SCO Site system
og ﴾System Center Online﴿, the online web service. server

AIUSMSI.log Records details about the installation of Asset Intelligence synchronization point site Site system
system role. server

AIUSSetup.lo Records details about the installation of Asset Intelligence synchronization point site Site system
g system role. server

ManagedProv Records details about discovering software with an associated software identification Site system
ider.log tag. Also records activities relating to hardware inventory. server

MVLSImport.l Records details about the processing of imported licensing files. Site system
og server

Backup and Recovery

The following table lists log files that contain information related to backup and recovery actions including site resets, and
changes to the SMS Provider.

Computer
Log name Description
with log file

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 17/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

ConfigMgrSet Records information about setup and recovery tasks when Configuration Manager Site server
up.log recovers a site from backup.

Smsbkup.log Records details about the site backup activity. Site server

smssqlbkup.l Records output from the site database backup process when SQL Server is installed Site database
og on a different server than the site server. server

Smswriter.log Records information about the state of the Configuration Manager VSS writer that Site server
is used by the backup process.

Certificate Enrollment
The following table lists the Configuration Manager log files that contain information related to certificate enrollment,
which uses the certificate registration point and the Configuration Manager Policy Module on the server running Network
Device Enrollment Service.

Log name Description Computer with log file

Crp.log Records the enrollment activities. Certificate registration point

Crpctrl.log Records the operational health of the certificate Certificate registration point
registration point.

Crpsetup.log Records details about the installation and Certificate registration point
configuration of the certificate registration point.

Crpmsi.log Records details about the installation and Certificate registration point
configuration of the certificate registration point.

NDESPlugin.l Records the challenge verification and certificate Configuration Manager Policy Module and the
og enrollment activities. Network Device Enrollment Service

In addition to the Configuration Manager log files, review the Windows Application logs in Event Viewer on the server
running the Network Device Enrollment Service and the server hosting the certificate registration point. For example, look
for messages from the NetworkDeviceEnrollmentService source. You can also use the following log files:

IIS log files for Network Device Enrollment Service: <path>\inetpub\logs\LogFiles\W3SVC1 

IIS log files for the certificate registration point: <path>\inetpub\logs\LogFiles\W3SVC1

Network Device Enrollment Policy log file: mscep.log

Note

This file is located in the folder for the Network Device Enrollment Service account profile, for example, in
C:\Users\SCEPSvc. For more information about how to enable logging for the Network Device Enrollment
Service, see the Enable Logging section in the Network Device Enrollment Service ﴾NDES﴿ in Active Directory
Certificate Services ﴾AD CS﴿ article on the TechNet wiki.

Client Notification
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 18/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

The following table lists the log files that contain information related to client notification.

Computer
Log name Description
with log file

bgbmgr.log Records details about the activities of the site server relating to client notification Site server
tasks and processing online and task status files.

BGBServer.lo Records the activities of the notification server such as client‐server communications Management
g and pushing tasks to clients. Also records information about online and task status point
files generation to be sent to the site server.

BgbSetup.log Records the activities of the notification server installation wrapper process during Management
installation and uninstall. point

bgbisapiMSI.l Records details about the notification server installation and uninstall. Management
og point

BgbHttpProx Records the activities of the notification HTTP proxy as it relays the messages of Client
y.log clients using HTTP to and from the notification server.

CcmNotificati Records the activities of the notification agent such as client‐server communication Client
onAgent.log and information about tasks received and dispatched to other client agents.

Compliance Settings and Company Resource Access

The following table lists the log files that contain information related to compliance settings and company resource
access.

Computer
Log name Description
with log file

CIAgent.log Records details about the process of remediation and compliance for compliance Client
settings, software updates, and application management.

CITaskManag Records information about configuration item task scheduling. Client

er.log

DCMAgent.lo Records high‐level information about the evaluation, conflict reporting, and Client
g remediation of configuration items and applications.

DCMReportin Records information about reporting policy platform results into state messages for Client
g.log configuration items.

DcmWmiProv Records information about reading configuration item synclets from Windows Client
ider.log Management Instrumentation ﴾WMI﴿.

Configuration Manager Console

The following table lists the log files that contain information related to the Configuration Manager console.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 19/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Log name Description Computer with log file

ConfigMgrAdm Records the installation of the Configuration Manager console. Computer that runs the
inUISetup.log Configuration Manager console

SmsAdminUI.lo Records information about the operation of the Configuration Computer that runs the
g Manager console. Configuration Manager console

Smsprov.log Records activities performed by the SMS Provider. Configuration Site server or site system server
Manager console activities use the SMS provider.

Content Management
The following table lists the log files that contain information related to content management.

Computer with log

Description
Log name file

For Records details for a specific cloud‐based distribution point, including Site system server
System Center 2012 information about storage and content access.
Configuration Man
ager SP1 and later:

CloudDP‐
<guid>.log

CloudMgr.log Records details about the provisioning of content, collecting storage Site system server
and bandwidth statistics, and administrator initiated actions to stop
or start the cloud service that runs a cloud‐based distribution point.

For Records all BITS communication for policy or package access. This log A computer that is
System Center 2012 is also used for content management by pull‐distribution points. configured as a pull‐
Configuration Man distribution point
ager SP1 and later:

DataTransferService
.log

For Records details about content that the pull‐distribution point A computer that is
System Center 2012 transfers from source distribution points. configured as a pull‐
Configuration Man distribution point
ager SP1 and later:

PullDP.log

PrestageContent.lo Records the details about the use of the ExtractContent.exe tool on a Site system role
g remote prestaged distribution point. This tool extracts content that
has been exported to a file.

SMSdpmon.log Records details about the distribution point health monitoring Site system role
scheduled task that are configured on a distribution point.

smsdpprov.log Records details about the extraction of compressed files received A distribution point
from a primary site. This log is generated by the WMI Provider of the computer that is not
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 20/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

remote distribution point. co‐located with the site

server.

Discovery
he following table lists the log files that contain information related to Discovery.

Computer with
Log name Description
log file

adsgdis.log Records Active Directory Security Group Discovery actions. Site server

adsysdis.log Records Active Directory System Discovery actions. Site server

adusrdis.log Records Active Directory User Discovery actions. Site server

ADForestDisc. Records Active Directory Forest Discovery actions. Site server

Log

ddm.log Records activities of the discovery data manager. Site server

InventoryAge Records activities of hardware inventory, software inventory, and heartbeat Client
nt.log discovery actions on the client.

netdisc.log Records Network Discovery actions. Site server

Endpoint Protection
The following table lists the log files that contain information related to Endpoint Protection.

Computer
Log name Description
with log file

EndpointProte Records details about the installation of the Endpoint Protection client and the Client
ctionAgent.log application of antimalware policy to that client.

EPCtrlMgr.log Records details about the synchronization of malware threat information from the Site system
Endpoint Protection role server into the Configuration Manager database. server

EPMgr.log Monitors the status of the Endpoint Protection site system role. Site system
server

EPSetup.log Provides information about the installation of the Endpoint Protection site system Site system
role. server

Extensions
For System Center 2012 R2 Configuration Manager and later:

The following table lists the log files that contain information related to Extensions.

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 21/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Log name Description Computer with log file

AdminUI.Exte Records information about the download of extensions from Microsoft, The computer that runs
nsionInstaller. and the installation and uninstallation of all extensions. the Configuration Manager
log console

FeatureExtens Records information about the installation and removal of individual The computer that runs
ionInstaller.lo extensions when they are enabled or disabled in the Configuration the Configuration Manager
g Manager console. console

SmsAdminUI.l Records Configuration Manager console activity. The computer that runs
og the Configuration Manager
console

Inventory
The following table lists the log files that contain information related to processing inventory data.

Computer
Log name Description
with log file

dataldr.log Records information about the processing of Management Information Format ﴾MIF﴿ Site server
files and hardware inventory in the Configuration Manager database.

invproc.log Records the forwarding of MIF files from a secondary site to its parent site. Secondary
site server

sinvproc.log Records information about the processing of software inventory data to the site Site server
database.

Metering
The following table lists the log files that contain information related to metering.

Log name Description Computer with log file

mtrmgr.log Monitors all software metering processes. Site server

Migration
The following table lists the log files that contain information related to migration.

Log name Description Computer with log file

migmctrl.log Records information about migration actions that The top‐level site in the System Center 2012
involve migration jobs, shared distribution points, and Configuration Manager hierarchy, and each
distribution point upgrades. child primary site

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 22/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Note

In a multi‐primary site hierarchy, use the

log file created at the central
administration site.

Mobile Devices
The following sections list the log files that contain information related to managing mobile devices .

Enrollment
The following table lists logs that contain information related to mobile device enrollment.

Computer
Log name Description
with log file

DMPRP.log Records communication between management points that are enabled for mobile Site system
devices and the management point endpoints. server

dmpmsi.log Records the Windows Installer data for the configuration of a management point that Site system
is enabled for mobile devices. server

DMPSetup.lo Records the configuration of the management point when it is enabled for mobile Site system
g devices. server

enrollsrvMSI.l Records the Windows Installer data for the configuration of an enrollment point. Site system
og server

enrollmentwe Records communication between mobile devices and the enrollment proxy point. Site system
b.log server

enrollwebMSI Records the Windows Installer data for the configuration of an enrollment proxy Site system
.log point. server

enrollmentser Records communication between an enrollment proxy point and an enrollment point. Site system
vice.log server

SMS_DM.log Records communication between mobile devices, Mac computers and the Site system
management point that is enabled for mobile devices and Mac computers. server

Exchange Server Connector

The following table lists logs that contain information related to the Exchange Server connector.

Log name Description Computer with log file

easdisc.log Records the activities and the status of the Exchange Server connector. Site server

Mobile Device Legacy

The following table lists logs that contain information related to the mobile device legacy client.
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 23/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Computer
Log name Description
with log file

DmCertEnroll. Records details about certificate enrollment data on mobile device legacy clients. Client
log

DMCertResp. Records the HTML response from the certificate server when the mobile device Client
htm legacy client enroller program requests a PKI certificate.

DmClientHeal Records the GUIDs of all the mobile device legacy clients that communicate with the Site system
th.log management point that is enabled for mobile devices. server

DmClientRegi Records registration requests and responses to and from mobile device legacy Site system
stration.log clients. server

DmClientSetu Records client setup data for mobile device legacy clients. Client
p.log

DmClientXfer. Records client transfer data for mobile device legacy clients and for ActiveSync Client
log deployments.

DmCommonI Records client transfer file installation for configuring mobile device legacy client Client
nstaller.log transfer files.

DmInstaller.lo Records whether DMInstaller correctly calls DmClientSetup, and whether Client
g DmClientSetup exits with success or failure for mobile device legacy clients.

DmpDatastor Records all the site database connections and queries made by the management Site system
e.log point that is enabled for mobile devices. server

DmpDiscover Records all the discovery data from the mobile device legacy clients on the Site system
y.log management point that is enabled for mobile devices. server

DmpHardwar Records hardware inventory data from mobile device legacy clients on the Site system
e.log management point that is enabled for mobile devices. server

DmpIsapi.log Records mobile device legacy client communication with a management point that is Site system
enabled for mobile devices. server

dmpmsi.log Records the Windows Installer data for the configuration of a management point that Site system
is enabled for mobile devices. server

DMPSetup.lo Records the configuration of the management point when it is enabled for mobile Site system
g devices. server

DmpSoftware Records software distribution data from mobile device legacy clients on a Site system
.log management point that is enabled for mobile devices. server

DmpStatus.lo Records status messages data from mobile device clients on a management point Site system
g that is enabled for mobile devices. server

DmSvc.log Client

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 24/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Records client communication from mobile device legacy clients with a management
point that is enabled for mobile devices.

FspIsapi.log Records details about communications to the fallback status point from mobile Site system
device legacy clients and client computers. server

Operating System Deployment

The following table lists the log files that contain information related to operating system deployment.

Log name Description Computer with log file

CAS.log Records details when distribution points are found for Client
referenced content.

ccmsetup.log Records ccmsetup tasks for client setup, client upgrade, and Client
client removal. Can be used to troubleshoot client
installation problems.

CreateTSMedia.log Records details for task sequence media creation. The computer that runs
the Configuration
Manager console

For System Center 2012 Records details about the VHD creation and modification The computer that runs
R2 Configuration Manager process the Configuration
and later: Manager console

DeployToVhd.log

Dism.log Records driver installation actions or update apply actions Site system server
for offline servicing.

Distmgr.log Records details about the configuration of enabling a Site system server
distribution point for PXE.

DriverCatalog.log Records details about device drivers that have been Site system server
imported into the driver catalog.

mcsisapi.log Records information for multicast package transfer and Site system server
client request responses.

mcsexec.log Records health check, namespace, session creation and Site system server
certificate check actions.

mcsmgr.log Records changes to configuration, security mode and Site system server
availability.

mcsprv.log Records multicast provider interaction with Windows Site system server
Deployment Services ﴾WDS﴿.

MCSSetup.log Records details about multicast server role installation. Site system server

MCSMSI.log Records details about multicast server role installation. Site system server

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 25/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Mcsperf.log Records details about multicast performance counter Site system server
updates.

MP_ClientIDManager.log Records management point responses to the client ID Site system server
requests task sequences initiated from PXE or boot media.

MP_DriverManager.log Records management point responses to Auto Apply Driver Site system server
task sequence action requests.

OfflineServicingMgr.log Records details of offline servicing schedules and update Site system server
apply actions on operating system .wim files.

Setupact.log Records details about Windows Sysprep and setup logs. Client

Setupapi.log Records details about Windows Sysprep and setup logs. Client

Setuperr.log Records details about Windows Sysprep and setup logs. Client

smpisapi.log Records details about the client state capture and restore Client
actions, and threshold information.

Smpmgr.log Records details about the results of state migration point Site system server
health checks and configuration changes.

smpmsi.log Records installation and configuration details about the Site system server
state migration point.

smpperf.log Records the state migration point performance counter Site system server
updates.

smspxe.log Records details about the responses to clients that PXE boot Site system server
and details about the expansion of boot images and boot
files.

smssmpsetup.log Records installation and configuration details about the Site system server
state migration point.

Smsts.log Records task sequence activities. Client

TSAgent.log Records the outcome of task sequence dependencies before Client

starting a task sequence.

TaskSequenceProvider.log Records details about task sequences when they are Site system server
imported, exported, or edited.

loadstate.log Records details about the User State Migration Tool ﴾USMT﴿ Client
and restoring user state data.

scanstate.log Records details about the User State Migration Tool ﴾USMT﴿ Client
and capturing user state data.

Out of Band Management

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 26/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

The following sections list the log files that contain information related to out of band management, for when you
manage Intel AMT‐based computers.

Site System Roles for Out of Band Management

The following table lists the log files that contain information related to the out of band service point.

Computer with
Log name Description
log file

amtopmgr.lo Records the activities of the out of band service point, which include the Out of band
g discovery of management controllers, provisioning, audit log control, and power service point site
control commands. system server

adctrl.log Records details about managing Active Directory accounts that are used by out Site server
of band management.

ADService.log Site server

Records details about account creation and security group details in Active
Directory.

amtproxymgr Records details about the activities of the site server relating to provisioning and Site server
.log sending instruction files to the out of band service point, which include the
following:

Discovery of management controllers

AMT provisioning
Audit log control
Power control commands

This log file also records information about out of band management site
replication.

amtspsetup.l Records details about the installation of the out of band service point. Out of band
og service point site
system server

Out of Band Management Client Computer Log Files

The following table lists the log files that contain information about the management activities on Intel AMT‐based
computers.

Computer
Log name Description
with log file

oobmgmt.log Records details about out of band management activities on AMT‐based computers, Client
which includes the AMT provisioning state of the management controller.

Out of Band Management Console Log Files

The following table lists the log files that contain information related to the out of band management console.

Log name Description Computer with log file

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 27/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

Oobconsole_<Machine Records details about running the out of Computer that runs the out of band
Name>_<User Name>.log band management console. management console

Power Management
The following table lists the log files that contain information related to power management.

Computer
Log name Description
with log file

pwrmgmt.log Records details about power management activities on the client computer, which Client
include monitoring and the enforcement of settings by the Power Management
Client Agent.

Remote Control
The following table lists the log files that contain information related to remote control.

Log name Description Computer with log file

CMRcViewer.l Records details about the activity of the Located in the %temp% folder on the computer running
og remote control viewer. the remote control viewer.

Reporting
The following table lists the Configuration Manager log files that contain information related to reporting.

Computer with
Log name Description
log file

srsrp.log Records information about the activity and status of the reporting services Site system server
point.

srsrpMSI.log Records detailed results of the reporting services point installation process from Site system server
the MSI output.

srsrpsetup.lo Records results of the reporting services point installation process. Site system server
g

Role‐Based Administration
The following table lists the log files that contain information related to managing role‐based administration.

Computer with
Log name Description
log file

hman.log Records information about site configuration changes, and the publishing of Site server
site information to Active Directory Domain Services.
https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 28/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

SMSProv.log Records WMI provider access to the site database. Computer with the
SMS Provider

Software Updates and Network Access Protection

The following table lists the log files that contain information related to software updates and Network Access Protection.

Computer
Log name Description
with log file

ccmcca.log Records details about the processing of compliance evaluation based on Client
Configuration Manager NAP policy processing, and contains the processing of
remediation for each software update required for compliance.

ccmperf.log Records activities related to the maintenance and capture of data related to client Client
performance counters.

PatchDownlo Records details about the process of downloading software updates from the update The
ader.log source to the download destination on the site server. computer
hosting the
Configuration
Manager
console from
which
downloads
are initiated

PolicyEvaluat Records details about the evaluation of policies on client computers, including Client
or.log policies from software updates.

RebootCoord Records details about the coordination of system restarts on client computers after Client
inator.log software update installations.

ScanAgent.lo Records details about scan requests for software updates, the WSUS location, and Client
g related actions.

SdmAgent.lo Records details about tracking of remediation and compliance. However, the software Client
g updates log file, Updateshandler.log, provides more informative details about
installing the software updates required for compliance.

This log file is shared with compliance settings.

ServiceWindo Records details about the evaluation of maintenance windows. Client

wManager.lo
g

smssha.log The main log file for the Configuration Manager Network Access Protection client Client
and it contains a merged statement of health information from the two Configuration
Manager components: location services ﴾LS﴿ and the configuration compliance agent
﴾CCA﴿. This log file also contains information about the interactions between the
Configuration Manager System Health Agent and the operating system NAP agent,
and also between the Configuration Manager System Health Agent and both the
configuration compliance agent and the location services. It provides information

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 29/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

about whether the NAP agent successfully initialized, the statement of health data,
and the statement of health response.

Smsshv.log This is the main log file for the System Health Validator point and records the basic Site system
operations of the System Health Validator service, such as the initialization progress. server

Smsshvadcac Records details about the retrieval of Configuration Manager health state references Site system
heclient.log from Active Directory Domain Services. server

SmsSHVCach Records details about the cache store used to hold the Configuration Manager NAP Site system
eStore.log health state references retrieved from Active Directory Domain Services, such as server
reading from the store and purging entries from the local cache store file. The cache
store is not configurable.

smsSHVQuar Records client statement of health information and processing operations. To obtain Site system
Validator.log full information, change the registry key LogLevel from 1 to 0 in the following server
location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMSSHV\Logging\@GLOBAL

smsshvregistr Records any dynamic change to the System Health Validator component Site system
ysettings.log configuration while the service is running. server

SMSSHVSetu Records the success or failure ﴾with failure reason﴿ of installing the System Health Site system
p.log Validator point. server

SmsWusHand Records details about the scan process for the Inventory Tool for Microsoft Updates. Client
ler.log

StateMessage Records details about software updates state messages that are created and sent to Client
.log the management point.

SUPSetup.log Records details about the software update point installation. When the software Site system
update point installation completes, Installation was successful is written to this log server
file.

UpdatesDepl Records details about deployments on the client, including software update Client
oyment.log activation, evaluation, and enforcement. Verbose logging shows additional
information about the interaction with the client user interface.

UpdatesHand Records details about software update compliance scanning and about the download Client
ler.log and installation of software updates on the client.

UpdatesStore Records details about compliance status for the software updates that were assessed Client
.log during the compliance scan cycle.

WCM.log Records details about software update point configurations and connections to the Site server
Windows Server Update Services ﴾WSUS﴿ server for subscribed update categories,
classifications, and languages.

WSUSCtrl.log Records details about the configuration, database connectivity, and health of the Site system
WSUS server for the site. server

wsyncmgr.log Records details about the software updates synchronization process. Site server

Client

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 30/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

WUAHandler. Records details about the Windows Update Agent on the client when it searches for
log software updates.

Wake On LAN
The following table lists the log files that contain information related to using Wake on LAN.

Note

Beginning with System Center 2012 Configuration Manager SP1, if you supplement Wake On LAN by using wake‐up
proxy, this activity is logged on the client. For example, see CcmExec.log and SleepAgent_<domain>@SYSTEM_0.log in
the Client Operations section of this topic.

Computer
Log name Description
with log file

wolcmgr.log Records details about which clients need to be sent wake‐up packets, the number of Site server
wake‐up packets sent, and the number of wake‐up packets retried.

wolmgr.log Records details about wake‐up procedures, such as when to wake up deployments Site server
that are configured for Wake On LAN.

Microsoft Intune Connector

The following table lists the log files that contain information related to the Microsoft Intune connector.

Log name Description Computer with log file

CertMgr.log Records certificate and proxy account information. Site server

CollEval.log Records details about when collections are created, changed, and Primary site and central
deleted by the Collection Evaluator. administration site

Cloudusersync.l Records license enablement for users. Computer with the Intune
og connector

Dataldr.log Records information about the processing of MIF files. Site server

ddm.log Records activities of the discovery data manager. Site server

Distmgr.log Records details about content distribution requests. Top‐level site server

Dmpdownloade Records details on downloads from Microsoft Intune. Computer with the Intune
r.log connector

Dmpuploader.l Records details for uploading database changes to Computer with the Intune
og Microsoft Intune. connector

hman.log Records information about message forwarding. Site server

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 31/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

objreplmgr.log Records the processing of policy and assignment. Primary site server

PolicyPV.log Records policy generation of all policies. Site server

outgoingconte Records content uploaded to Microsoft Intune. Computer with the Intune

ntmanager.log connector

Sitecomp.log Records details of connector role installation. Site server

SmsAdminUI.lo Records Configuration Manager console activity. Computer that runs the
g Configuration Manager console

Smsprov.log Records activities performed by the SMS Provider. Configuration Computer with the
Manager console activities use the SMS Provider. SMS Provider

SrvBoot.log Records details about the Intune connector installer service. Computer with the Intune
connector

Statesys.log  Records the processing of mobile device management messages. Primary site and central
administration site

Windows Update Agent

The following table lists the log files that contain information related to the Windows Update Agent.

Computer
Log name Description
with log file

WindowsUpd Records details about when the Windows Update Agent connects to the WSUS server Client
ate.log and retrieves the software updates for compliance assessment and whether there are
updates to the agent components.

WSUS Server
The following table lists the log files that contain information related to the WSUS server.

Computer
Log name Description
with log file

Change.log Records details about the WSUS server database information that has changed. WSUS server

SoftwareDistri Records details about the software updates that are synchronized from the WSUS server
bution.log configured update source to the WSUS server database.

See Also
Technical Reference for Site Administration in Configuration Manager

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 32/33
11/19/2016 Technical Reference for Log Files in Configuration Manager

© 2016 Microsoft

https://technet.microsoft.com/en­us/library/hh427342(d=printer).aspx 33/33